Skip site navigation (1) Skip section navigation (2)

pgsql: Creator of a range type must have permission to call supportfun

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: pgsql-committers(at)postgresql(dot)org
Subject: pgsql: Creator of a range type must have permission to call supportfun
Date: 2011-11-23 17:46:03
Message-ID: E1RTGtX-00004v-9H@gemulon.postgresql.org (view raw or flat)
Thread:
Lists: pgsql-committers
Creator of a range type must have permission to call support functions.

Since range types can be created by non-superusers, we need to consider
their permissions.  Ideally we'd check this when the type is used, not
when it's created, but that seems like much more trouble than it's worth.
The existing restriction that the support functions be immutable already
prevents most cases where an unauthorized call to a function might be
thought a security issue, and the fact that the user has no access to
the results of the system's calls to subtype_diff closes off the other
plausible reason for concern.  So this check is basically pro-forma,
but let's make it anyway.

Branch
------
master

Details
-------
http://git.postgresql.org/pg/commitdiff/a912a2784be5d144aab89e447dfe8ca74b6ad079

Modified Files
--------------
src/backend/commands/typecmds.c |   12 ++++++++++++
1 files changed, 12 insertions(+), 0 deletions(-)

pgsql-committers by date

Next:From: Tom LaneDate: 2011-11-23 22:13:16
Subject: pgsql: Adjust range_adjacent to support different canonicalizationrule
Previous:From: Tom LaneDate: 2011-11-23 05:03:38
Subject: pgsql: Remove user-selectable ANALYZE option for range types.

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group