Re: BUG #6524: lpermission denied to create extension "ltree". Must be superuser to create this extension.

From: Josh Kupershmidt <schmiddy(at)gmail(dot)com>
To: spamik(at)yum(dot)pl
Cc: pgsql-bugs(at)postgresql(dot)org
Subject: Re: BUG #6524: lpermission denied to create extension "ltree". Must be superuser to create this extension.
Date: 2012-03-11 19:14:49
Message-ID: CAK3UJRHDChtZQTYpMiUVrUjGF=S7triMzA9fjtGuipkOnCzKvA@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

On Fri, Mar 9, 2012 at 8:50 PM, <spamik(at)yum(dot)pl> wrote:

> CREATE EXTENSION ltree;
> ERROR:  permission denied to create extension "ltree"
> HINT:  Must be superuser to create this extension.
>
> Why does ltree require superuser privledge? Is it dangerous and allow
> circumventing server security? No mention of this in manual so it is either
> documentation problem or a too strict check problem.

The bulk of ltree--1.0.sql contains commands which must be executed by
superuser (e.g. creating C language functions, or CREATE OPERATOR
CLASS).

And the text for appendix F[1] does in fact mention that contrib
modules will need to be installed by a superuser, so this restriction
is not entirely undocumented.

Josh

[1] http://www.postgresql.org/docs/devel/static/contrib.html

In response to

Browse pgsql-bugs by date

  From Date Subject
Next Message adam.robertson 2012-03-11 20:46:41 BUG #6526: Intermittent connect issue
Previous Message Jeff Davis 2012-03-11 18:20:04 check_locale() and the empty string