Tom Lane wrote:
> pgsql-bugs(at)postgresql(dot)org writes:
> > select table privilege  in postgres allows user to create index on the table
> 
> Actually, it appears that CREATE INDEX has no permission check at all.
> 
> I agree this is a bug.  Probably CREATE INDEX should require ownership
> permission, the same as ALTER TABLE.

Added to TODO:

	* Allow only owner to create indexes

-- 
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman(at)candle(dot)pha(dot)pa(dot)us               |  (610) 853-3000
  +  If your life is a hard drive,     |  830 Blythe Avenue
  +  Christ can be your backup.        |  Drexel Hill, Pennsylvania 19026

In response to

• Re: Bug #549: select table privilege in postgres allows user to create index on the table at 2002-01-03 16:54:21 from Tom Lane

Responses

• Re: [HACKERS] Bug #549: select table privilege in postgres allows user to create index on the table at 2002-01-03 17:43:07 from Tom Lane

pgsql-hackers by date

Next:	From: Tom Lane	Date: 2002-01-03 17:41:12
	Subject: Re: LWLock contention: I think I understand the problem
Previous:	From: Bruce Momjian	Date: 2002-01-03 17:27:58
	Subject: Re: [HACKERS] Updated TODO item

pgsql-bugs by date

Next:	From: Tom Lane	Date: 2002-01-03 17:43:07
	Subject: Re: [HACKERS] Bug #549: select table privilege in postgres allows user to create index on the table
Previous:	From: Tom Lane	Date: 2002-01-03 17:22:26
	Subject: Re: Refcursor problem