Superuser without pg_hba could drop database from client at pgAdminIII
Object browser by left click & Delete/Drop.
User has superuser rights, but no pg_hba connection entry for the host.
There are warnings on left click, twice:
An error has occured:
FATAL: no pg_hba.conf entry for host "172.17.0.8", user "tempuser", database
"testdatabase", SSL on
FATAL: no pg_hba.conf entry for host "172.17.0.8", user "tempuser", database
"testdatabase", SSL off
Then context menu appear, click Delete/Drop, Yes on confirmation.
The database is gone.
pgAdminIII at client:
Windows XP
pgAdminIII 1.10.3 (from PostgreSQL 8.4 windows package)
PostgreSQL 8.4 server:
Ubuntu 10.04
I think it is very dangerous.
Regards,
Mudy