GRANT on functions/languages

Bruce Momjian <pgman@candle.pha.pa.us> writes:

Now that we have relaxed the restriction on functions/languages, should
we make sure we have GRANTS for all of them, including /contrib, or
remove them all.

I feel no strong need to do anything. The contrib entries that have
explicit GRANTs are okay and pretty future-proof; but the ones that
don't have 'em are not broken. We have other problems to contend with
that deserve more attention than this one...

regards, tom lane

Tom Lane wrote:

Bruce Momjian <pgman@candle.pha.pa.us> writes:

Now that we have relaxed the restriction on functions/languages, should
we make sure we have GRANTS for all of them, including /contrib, or
remove them all.

I feel no strong need to do anything. The contrib entries that have
explicit GRANTs are okay and pretty future-proof; but the ones that
don't have 'em are not broken. We have other problems to contend with
that deserve more attention than this one...

I was looking for consistency so we could have things ready if we
tighten up in 7.4. I believe someone volunteered to fix them all so I
figured we should do that.

-- 
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman@candle.pha.pa.us               |  (610) 359-1001
  +  If your life is a hard drive,     |  13 Roberts Road
  +  Christ can be your backup.        |  Newtown Square, Pennsylvania 19073

Bruce Momjian <pgman@candle.pha.pa.us> writes:

I was looking for consistency so we could have things ready if we
tighten up in 7.4. I believe someone volunteered to fix them all so I
figured we should do that.

Someone did volunteer, but I haven't seen results. My point is that
it's not important as things stand. If anyone wants to go through the
contrib functions and introduce some consistency, it would be much more
useful to check their strictness and volatility attributes ... not to
mention converting them all to v1 call convention for portability's sake
...

regards, tom lane

Tom Lane wrote:

Bruce Momjian <pgman@candle.pha.pa.us> writes:

I was looking for consistency so we could have things ready if we
tighten up in 7.4. I believe someone volunteered to fix them all so I
figured we should do that.

Someone did volunteer, but I haven't seen results. My point is that
it's not important as things stand. If anyone wants to go through the
contrib functions and introduce some consistency, it would be much more
useful to check their strictness and volatility attributes ... not to
mention converting them all to v1 call convention for portability's sake
...

In my mind, the big question is whether we need things to be done in a
certain way now so we can tighten function/language permissions in 7.4
if we want to. For 7.3, we had to relax because of upgrade problems,
but if we want to tighten for 7.4, we have to plan that now.

-- 
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman@candle.pha.pa.us               |  (610) 359-1001
  +  If your life is a hard drive,     |  13 Roberts Road
  +  Christ can be your backup.        |  Newtown Square, Pennsylvania 19073