Skip site navigation (1) Skip section navigation (2)

Re: [ADMIN] two questions about pg 9.0

From: Guillaume Lelarge <guillaume(at)lelarge(dot)info>
To: pgadmin-hackers <pgadmin-hackers(at)postgresql(dot)org>
Cc: Kasia Tuszynska <ktuszynska(at)esri(dot)com>
Subject: Re: [ADMIN] two questions about pg 9.0
Date: 2010-10-15 22:23:57
Message-ID: 4CB8D47D.7070804@lelarge.info (view raw or flat)
Thread:
Lists: pgadmin-hackerspgsql-adminpgsql-testers
Le 14/10/2010 12:35, Guillaume Lelarge a écrit :
> Le 13/10/2010 23:20, Guillaume Lelarge a écrit :
>> Le 13/10/2010 22:21, Kasia Tuszynska a écrit :
>>> [...]
>>> Thanks for your reply I did a bit more testing with the superuser priv issue, and now I came to the conclusion that pgAdminIII may be doing something silly.
>>>
>>
>> Sure, that happens more than I would like.
>>
>>> I created a user: bob
>>>
>>> In pgAdminIII I checked off the box for: can inherit from parent role, can create db object, superuser
>>> Got the following sql: 
>>> CREATE ROLE bob LOGIN
>>>   ENCRYPTED PASSWORD 'md51e9484aace238e7cb2609130fd87646e'
>>>   SUPERUSER INHERIT CREATEDB NOCREATEROLE;
>>> UPDATE pg_authid SET rolcapupdate=false WHERE rolname='bob';
>>>
>>> Than I created bobb
>>> In pgAdminIII I checked off the box for: can inherit from parent role, can create db object, superuser, Can modify catalog directly
>>> Got the following sql: 
>>> CREATE ROLE bobb LOGIN
>>>   ENCRYPTED PASSWORD 'md51e9484aace238e7cb2609130fd87646e'
>>>   SUPERUSER INHERIT CREATEDB NOCREATEROLE;
>>>
>>> Conclusion:
>>> Sql level superuser = pgAdminIII superuser + can modify catalog directly
>>>
>>> This is misleading, I would call it a pgAdminIII bug but who knows maybe it is a feature...
>>>
>>
>> I would not call it a feature. I find this misleading too. I'm too tired
>> right now to work on a fix, but it'll be easy and quick to do.
>>
>> I have a few things to commit tomorrow. I'll try to work on this at the
>> same time.
>>
> 
> OK, was really simple to fix. See the patch attached.
> 
> Any comments on this patch? I'm ready to commit it on 1.12 and master,
> if no-one objects.
> 

Commited.


-- 
Guillaume
 http://www.postgresql.fr
 http://dalibo.com

In response to

pgsql-admin by date

Next:From: Guillaume LelargeDate: 2010-10-15 22:24:54
Subject: Re: two questions about pg 9.0
Previous:From: Guillaume LelargeDate: 2010-10-15 21:47:43
Subject: Re: PG 9.0.1 upgrade issues

pgadmin-hackers by date

Next:From: Guillaume LelargeDate: 2010-10-15 22:24:54
Subject: Re: two questions about pg 9.0
Previous:From: pgAdmin TracDate: 2010-10-15 22:23:33
Subject: Re: [pgAdmin III] #257: UI glitch with superuser /canupdatecatalogs

pgsql-testers by date

Next:From: Guillaume LelargeDate: 2010-10-15 22:24:54
Subject: Re: two questions about pg 9.0
Previous:From: Guillaume LelargeDate: 2010-10-14 10:35:29
Subject: Re: [ADMIN] two questions about pg 9.0

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group