From: | Andrew Gierth <andrew(at)tao11(dot)riddles(dot)org(dot)uk> |
---|---|
To: | tgl(at)sss(dot)pgh(dot)pa(dot)us (Tom Lane), PGSQL Mailing List <pgsql-general(at)postgresql(dot)org>, pgsql-hackers(at)postgresql(dot)org |
Cc: | Bruce Momjian <bruce(at)momjian(dot)us>, Kevin Grittner <Kevin(dot)Grittner(at)wicourts(dot)gov>, Robert Haas <robertmhaas(at)gmail(dot)com>, Scott Marlowe <scott(dot)marlowe(at)gmail(dot)com>, Thom Brown <thombrown(at)gmail(dot)com>, Andrew Dunstan <andrew(at)dunslane(dot)net>, Craig Ringer <craig(at)postnewspapers(dot)com(dot)au> |
Subject: | Re: [HACKERS] Installing PL/pgSQL by default |
Date: | 2009-12-04 10:07:58 |
Message-ID: | 874oo7oy43.fsf@news-spur.riddles.org.uk |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general pgsql-hackers |
>>>>> "Tom" == Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> writes:
> Andrew Dunstan <andrew(at)dunslane(dot)net> writes:
>> Before we go too far with this, I'd like to know how we will handle the
>> problems outlined here:
>> <http://archives.postgresql.org/pgsql-hackers/2008-02/msg00916.php>
Tom> Hm, I think that's only a problem if we define it to be a
Tom> problem, and I'm not sure it's necessary to do so. Currently,
Tom> access to PL languages is controlled by superusers. You are
Tom> suggesting that if plpgsql is installed by default, then access
Tom> to it should be controlled by non-superuser DB owners instead.
Currently, a non-superuser db owner can install plpgsql, and having
installed it, can DROP it or grant/revoke access to it:
test=> create language plpgsql;
CREATE LANGUAGE
test=> revoke usage on language plpgsql from public;
REVOKE
test=> drop language plpgsql;
DROP LANGUAGE
The complaint is that if plpgsql is installed by default, then it will
be owned by postgres rather than by the db owner, who will then not be
able to drop it or use grant/revoke on it.
(This only became an issue since the ability for non-superuser DB owners
to install languages from pltemplate was added.)
--
Andrew (irc:RhodiumToad)
From | Date | Subject | |
---|---|---|---|
Next Message | Ivan Voras | 2009-12-04 10:15:23 | Re: SELECTing every Nth record for better performance |
Previous Message | A. Kretschmer | 2009-12-04 06:42:00 | Re: SELECTing every Nth record for better performance |
From | Date | Subject | |
---|---|---|---|
Next Message | Tsutomu Yamada | 2009-12-04 10:42:51 | Re: [PATCH] Windows x64 [repost] |
Previous Message | Massa, Harald Armin | 2009-12-04 09:51:03 | Re: Block-level CRC checks |