pgsql: Restrict non-superusers to password authenticated connections to

Started by Nonameabout 19 years ago1 messagescomitters

joe@postgresql.org

about 19 years ago

Log Message:
-----------
Restrict non-superusers to password authenticated connections
to prevent possible escalation of privilege. Provide new SECURITY
DEFINER functions with old behavior, but initially REVOKE ALL
from public for these functions. Per list discussion and design
proposed by Tom Lane.

Tags:
----
REL8_0_STABLE

Modified Files:
--------------
pgsql/contrib/dblink:
dblink.c (r1.38.4.1 -> r1.38.4.2)
(http://developer.postgresql.org/cvsweb.cgi/pgsql/contrib/dblink/dblink.c.diff?r1=1.38.4.1&r2=1.38.4.2)
dblink.sql.in (r1.9 -> r1.9.4.1)
(http://developer.postgresql.org/cvsweb.cgi/pgsql/contrib/dblink/dblink.sql.in.diff?r1=1.9&r2=1.9.4.1)
pgsql/contrib/dblink/doc:
connection (r1.2 -> r1.2.8.1)
(http://developer.postgresql.org/cvsweb.cgi/pgsql/contrib/dblink/doc/connection.diff?r1=1.2&r2=1.2.8.1)