Re: [HACKERS] Re: Bug#21681: postgresql: Doesn't allow granting to

From: Bruce Momjian <maillist(at)candle(dot)pha(dot)pa(dot)us>
To: lockhart(at)alumni(dot)caltech(dot)edu (Thomas G(dot) Lockhart)
Cc: olly(at)lfix(dot)co(dot)uk, jgoerzen(at)complete(dot)org, pgsql-hackers(at)postgresql(dot)org, 21681(at)bugs(dot)debian(dot)org
Subject: Re: [HACKERS] Re: Bug#21681: postgresql: Doesn't allow granting to
Date: 1998-04-29 03:56:21
Message-ID: 199804290357.XAA05953@candle.pha.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

>
> More info on the GRANT problem with user names containing a minus sign:
>
> It turns out that "+-=" are used inside an ACL string constructed
> internally in the backend. So, putting one of those characters into the
> user name causes what follows to be misinterpreted.
>
> * aclparse
> * Consumes and parses an ACL specification of the form:
> * [group|user] [A-Za-z0-9]*[+-=][rwaR]*
>
> I think that we would need to restructure this internal information to
> make the user name field unambiguous no matter its contents.
>
> Bruce, can you put this on the ToDo list? In the meantime I would
> suggest _not_ restricting the allowable user names elsewhere, since this
> is a bug fix kind of thing...

Added to TODO:

* Restructure storing of GRANT permission information to allow +-=

--
Bruce Momjian | 830 Blythe Avenue
maillist(at)candle(dot)pha(dot)pa(dot)us | Drexel Hill, Pennsylvania 19026
+ If your life is a hard drive, | (610) 353-9879(w)
+ Christ can be your backup. | (610) 853-3000(h)

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message John Goerzen 1998-04-29 05:13:52 Re: Bug#21681: postgresql: Doesn't allow granting to www-data
Previous Message Thomas G. Lockhart 1998-04-29 02:58:53 Re: [HACKERS] Re: Bug#21681: postgresql: Doesn't allow granting to www-data