From: | David Fetter <david(at)fetter(dot)org> |
---|---|
To: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
Cc: | Tatsuo Ishii <ishii(at)sraoss(dot)co(dot)jp>, pgsql-hackers(at)lists(dot)postgresql(dot)org |
Subject: | Re: Doc typo? |
Date: | 2018-12-18 23:38:05 |
Message-ID: | 20181218233804.GJ416@fetter.org |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-hackers |
On Tue, Dec 18, 2018 at 06:16:14PM -0500, Tom Lane wrote:
> Tatsuo Ishii <ishii(at)sraoss(dot)co(dot)jp> writes:
> > While translating the manual into Japanese, I had a hard time to
> > parse following sentence in func.sgml:
>
> > Note that granting users the EXECUTE privilege on the
> > <function>pg_read_file()</function>, or related, functions allows them the
> > ability to read any file on the server which the database can read and
> > that those reads bypass all in-database privilege checks.
>
> > It seems there's an extra comma between "related" and "functions". Am I correct?
>
> I'd move the comma not remove it; and I think "the pg_read_file()" is
> pretty bad English too. So perhaps
>
> Note that granting users the EXECUTE privilege on
> <function>pg_read_file()</function>, or related functions, allows them the
> ability to read any file on the server which the database can read and
> that those reads bypass all in-database privilege checks.
Maintaining parallelism:
Note that granting users the EXECUTE privilege on
<function>pg_read_file()</function>, or on related functions, allows them the
ability to read any file on the server which the database can read and
that those reads bypass all in-database privilege checks.
Is there a useful distinction to be drawn between the files readable
by the system user who owns the database and those the database itself
can read?
Best,
David.
--
David Fetter <david(at)fetter(dot)org> http://fetter.org/
Phone: +1 415 235 3778
Remember to vote!
Consider donating to Postgres: http://www.postgresql.org/about/donate
From | Date | Subject | |
---|---|---|---|
Next Message | Tom Lane | 2018-12-18 23:47:42 | Re: Doc typo? |
Previous Message | Peter Geoghegan | 2018-12-18 23:25:36 | Re: [HACKERS] CLUSTER command progress monitor |