pgsql: Document that CREATE OPERATOR CLASS amounts to granting public

Started by Tom Laneover 20 years ago1 messagescomitters
Jump to latest
#1Tom Lane
tgl@sss.pgh.pa.us

Log Message:
-----------
Document that CREATE OPERATOR CLASS amounts to granting public execute
permissions on the functions and operators contained in the opclass.
Since we already require superuser privilege to create an operator class,
there's no expansion-of-privilege hazard here, but if someone were to get
the idea of building an opclass containing functions that need security
restrictions, we'd better warn them off. Also, change the permission
checks from have-execute-privilege to have-ownership, and then comment
them all out since they're dead code anyway under the superuser restriction.

Modified Files:
--------------
pgsql/doc/src/sgml/ref:
create_opclass.sgml (r1.13 -> r1.14)
(http://developer.postgresql.org/cvsweb.cgi/pgsql/doc/src/sgml/ref/create_opclass.sgml.diff?r1=1.13&r2=1.14)
pgsql/src/backend/commands:
opclasscmds.c (r1.40 -> r1.41)
(http://developer.postgresql.org/cvsweb.cgi/pgsql/src/backend/commands/opclasscmds.c.diff?r1=1.40&r2=1.41)