Re: BUG #6652: Installer grants postgres user rights for the whole disk, not specified subfolder

Excerpts from Dave Page's message of mar jun 05 14:38:54 -0400 2012:
>
> On Sun, May 20, 2012 at 7:05 PM, Alvaro Herrera
> <alvherre(at)commandprompt(dot)com> wrote:

> >> I have been installing PostgreSQL 9.1.3.2, and I've noted that 'creating
> >> database cluster' is too long. I have been waiting for a half of hour, and
> >> it hasn't finished.
> >> I've noted that installer calls icacls.exe with arguments:
> >> D:\ /grant "postgres":RX
> >
> > This seems to be reported every once in a while.  It looks like the
> > one-clunk installer is to blame.  Maybe it's been fixed in some more
> > recent version -- Dave Page would probably know.
>
> Just as an FYI, we are working on this. We've been able to reproduce
> it, and it appears that icacls (a Microsoft utility) will sometimes
> look at the ACL of every file/directory recursively when it grants the
> required privileges on higher level directories. The good news is that
> in none of the test we've done has it ever modified the ACL on the
> wrong thing - it just takes a long time if there are a lot of items on
> the filesystem. We've looked at third party alternatives to icacls,
> and they seem to exhibit similar traits. We're also going to look into
> other ways around the root problem.

Maybe you should provide some way for the user to figure out the exact
command it's running, where it's running it, and what user it runs as.

--
Álvaro Herrera <alvherre(at)commandprompt(dot)com>
The PostgreSQL Company - Command Prompt, Inc.
PostgreSQL Replication, Consulting, Custom Development, 24x7 support