pgsql-server/ oc/src/sgml/ref/grant.sgml rc/ba ...

Started by Tom Lanealmost 24 years ago3 messagescomitters
Jump to latest
#1Tom Lane
tgl@sss.pgh.pa.us

CVSROOT: /cvsroot
Module name: pgsql-server
Changes by: tgl@postgresql.org 02/09/03 18:17:35

Modified files:
doc/src/sgml/ref: grant.sgml
src/backend/commands: dbcommands.c
src/backend/utils/adt: acl.c
src/bin/initdb : initdb.sh

Log message:
Arrange for the default permissions on a database to allow temp table
creation to world, but disallow temp table creation in template1. Per
latest round of pghackers discussion.
I did not force initdb, but the permissions lockdown on template1 will
not take effect unless you do one (or manually REVOKE TEMP ON DATABASE template1 FROM public).

#2Bruce Momjian
bruce@momjian.us
In reply to: Tom Lane (#1)
Re: pgsql-server/ oc/src/sgml/ref/grant.sgml rc/ba ...

I wonder if you should force initdb to make sure everyone during beta
has the same configuration.

---------------------------------------------------------------------------

Tom Lane wrote:

CVSROOT: /cvsroot
Module name: pgsql-server
Changes by: tgl@postgresql.org 02/09/03 18:17:35

Modified files:
doc/src/sgml/ref: grant.sgml
src/backend/commands: dbcommands.c
src/backend/utils/adt: acl.c
src/bin/initdb : initdb.sh

Log message:
Arrange for the default permissions on a database to allow temp table
creation to world, but disallow temp table creation in template1. Per
latest round of pghackers discussion.
I did not force initdb, but the permissions lockdown on template1 will
not take effect unless you do one (or manually REVOKE TEMP ON DATABASE template1 FROM public).

---------------------------(end of broadcast)---------------------------
TIP 1: subscribe and unsubscribe commands go to majordomo@postgresql.org

-- 
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman@candle.pha.pa.us               |  (610) 359-1001
  +  If your life is a hard drive,     |  13 Roberts Road
  +  Christ can be your backup.        |  Newtown Square, Pennsylvania 19073
#3Tom Lane
tgl@sss.pgh.pa.us
In reply to: Bruce Momjian (#2)
Re: pgsql-server/ oc/src/sgml/ref/grant.sgml rc/ba ...

Bruce Momjian <pgman@candle.pha.pa.us> writes:

I wonder if you should force initdb to make sure everyone during beta
has the same configuration.

Not worth it. If we get a bug "I can create temp tables in template1,
but I shouldn't be able to" we'll know why, and I don't really foresee
any other risks ...

regards, tom lane