Re: [HACKERS] Re: Bug#21681: postgresql: Doesn't allow granting to www-data

From: "Thomas G(dot) Lockhart" <lockhart(at)alumni(dot)caltech(dot)edu>
To: Oliver Elphick <olly(at)lfix(dot)co(dot)uk>, Bruce Momjian <maillist(at)candle(dot)pha(dot)pa(dot)us>
Cc: John Goerzen <jgoerzen(at)complete(dot)org>, pgsql-hackers(at)postgresql(dot)org, 21681(at)bugs(dot)debian(dot)org
Subject: Re: [HACKERS] Re: Bug#21681: postgresql: Doesn't allow granting to www-data
Date: 1998-04-29 02:58:53
Message-ID: 3546976D.509CD51@alumni.caltech.edu
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

More info on the GRANT problem with user names containing a minus sign:

It turns out that "+-=" are used inside an ACL string constructed
internally in the backend. So, putting one of those characters into the
user name causes what follows to be misinterpreted.

* aclparse
* Consumes and parses an ACL specification of the form:
* [group|user] [A-Za-z0-9]*[+-=][rwaR]*

I think that we would need to restructure this internal information to
make the user name field unambiguous no matter its contents.

Bruce, can you put this on the ToDo list? In the meantime I would
suggest _not_ restricting the allowable user names elsewhere, since this
is a bug fix kind of thing...

- Tom

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Bruce Momjian 1998-04-29 03:56:21 Re: [HACKERS] Re: Bug#21681: postgresql: Doesn't allow granting to
Previous Message Thomas G. Lockhart 1998-04-29 02:19:07 Re: [HACKERS] Re: Bug#21681: postgresql: Doesn't allow granting to www-data