Skip site navigation (1) Skip section navigation (2)

Re: BUG #1114: REVOKE done by non-privileged user claims success

From: Peter Eisentraut <peter_e(at)gmx(dot)net>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, "Oliver Elphick" <olly(at)lfix(dot)co(dot)uk>
Cc: pgsql-bugs(at)postgresql(dot)org
Subject: Re: BUG #1114: REVOKE done by non-privileged user claims success
Date: 2004-03-25 09:19:38
Message-ID: 200403251019.38407.peter_e@gmx.net (view raw or flat)
Thread:
Lists: pgsql-bugs
Tom Lane wrote:
> Looking at the code, this seems to be intentional, because the
> privilege check is not made for revokes only for grants:
> Peter, do you remember why you did it that way?

I'm not really sure right now.  It doesn't really make sense, does it?  
Certainly, the SQL standard requires a privilege check on revoke.


In response to

pgsql-bugs by date

Next:From: Martin PittDate: 2004-03-25 11:25:33
Subject: Fwd: Infinite recursion in function causes DoS
Previous:From: wespvpDate: 2004-03-24 23:01:59
Subject: Found Solaris sqlca problem, I think...

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group