pgsql-server/ oc/src/sgml/ref/grant.sgml rc/ba ...
CVSROOT: /cvsroot
Module name: pgsql-server
Changes by: tgl@postgresql.org 02/09/03 18:17:35
Modified files:
doc/src/sgml/ref: grant.sgml
src/backend/commands: dbcommands.c
src/backend/utils/adt: acl.c
src/bin/initdb : initdb.sh
Log message:
Arrange for the default permissions on a database to allow temp table
creation to world, but disallow temp table creation in template1. Per
latest round of pghackers discussion.
I did not force initdb, but the permissions lockdown on template1 will
not take effect unless you do one (or manually REVOKE TEMP ON DATABASE template1 FROM public).
I wonder if you should force initdb to make sure everyone during beta
has the same configuration.
---------------------------------------------------------------------------
Tom Lane wrote:
CVSROOT: /cvsroot
Module name: pgsql-server
Changes by: tgl@postgresql.org 02/09/03 18:17:35Modified files:
doc/src/sgml/ref: grant.sgml
src/backend/commands: dbcommands.c
src/backend/utils/adt: acl.c
src/bin/initdb : initdb.shLog message:
Arrange for the default permissions on a database to allow temp table
creation to world, but disallow temp table creation in template1. Per
latest round of pghackers discussion.
I did not force initdb, but the permissions lockdown on template1 will
not take effect unless you do one (or manually REVOKE TEMP ON DATABASE template1 FROM public).---------------------------(end of broadcast)---------------------------
TIP 1: subscribe and unsubscribe commands go to majordomo@postgresql.org
--
Bruce Momjian | http://candle.pha.pa.us
pgman@candle.pha.pa.us | (610) 359-1001
+ If your life is a hard drive, | 13 Roberts Road
+ Christ can be your backup. | Newtown Square, Pennsylvania 19073
Bruce Momjian <pgman@candle.pha.pa.us> writes:
I wonder if you should force initdb to make sure everyone during beta
has the same configuration.
Not worth it. If we get a bug "I can create temp tables in template1,
but I shouldn't be able to" we'll know why, and I don't really foresee
any other risks ...
regards, tom lane