Skip site navigation (1) Skip section navigation (2)


From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: "Sergey N(dot) Yatskevich" <syatskevich(at)2100(dot)gosniias(dot)ru>
Cc: pgsql-bugs(at)postgreSQL(dot)org
Subject: Re: Bug in ALTER LANGUAGE ... RENAME TO ...;
Date: 2005-02-14 19:20:28
Message-ID: (view raw, whole thread or download thread mbox)
Lists: pgsql-bugs
"Sergey N. Yatskevich" <syatskevich(at)2100(dot)gosniias(dot)ru> writes:
>  , 14/02/2005  01:52 -0500, Tom Lane :
>> BTW, is there a security issue here?

> I think this is not good but not so bad because:
> 1) ALTER LANGUAGE can be used only users with superuser privilegies

Right --- that check is made before we do anything that could go wrong.
So, no security hole, because if you are superuser you already have the
keys to the kingdom anyway ...

> We catch this error only because we try to do formal testing of all
> PostgreSQL features listed in documentation.

Cool.  What progress are you making?

			regards, tom lane

In response to

pgsql-bugs by date

Next:From: Bruce MomjianDate: 2005-02-14 23:22:50
Subject: Re: incorrect index behaviour with rtree on box values
Previous:From: Bruce MomjianDate: 2005-02-14 18:46:29
Subject: Re: Bug in ALTER LANGUAGE ... RENAME TO ...;

Privacy Policy | About PostgreSQL
Copyright © 1996-2017 The PostgreSQL Global Development Group