| Lists: | pgsql-committers |
|---|
| From: | tgl(at)postgresql(dot)org (Tom Lane) |
|---|---|
| To: | pgsql-committers(at)postgresql(dot)org |
| Subject: | pgsql-server/ oc/src/sgml/ref/grant.sgml rc/ba ... |
| Date: | 2002-09-03 22:17:35 |
| Message-ID: | [email protected] |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Lists: | pgsql-committers |
CVSROOT: /cvsroot
Module name: pgsql-server
Changes by: tgl(at)postgresql(dot)org 02/09/03 18:17:35
Modified files:
doc/src/sgml/ref: grant.sgml
src/backend/commands: dbcommands.c
src/backend/utils/adt: acl.c
src/bin/initdb : initdb.sh
Log message:
Arrange for the default permissions on a database to allow temp table
creation to world, but disallow temp table creation in template1. Per
latest round of pghackers discussion.
I did not force initdb, but the permissions lockdown on template1 will
not take effect unless you do one (or manually REVOKE TEMP ON DATABASE template1 FROM public).
| From: | Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> |
|---|---|
| To: | Tom Lane <tgl(at)postgresql(dot)org> |
| Cc: | pgsql-committers(at)postgresql(dot)org |
| Subject: | Re: pgsql-server/ oc/src/sgml/ref/grant.sgml rc/ba ... |
| Date: | 2002-09-03 22:21:33 |
| Message-ID: | [email protected] |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Lists: | pgsql-committers |
I wonder if you should force initdb to make sure everyone during beta
has the same configuration.
---------------------------------------------------------------------------
Tom Lane wrote:
> CVSROOT: /cvsroot
> Module name: pgsql-server
> Changes by: tgl(at)postgresql(dot)org 02/09/03 18:17:35
>
> Modified files:
> doc/src/sgml/ref: grant.sgml
> src/backend/commands: dbcommands.c
> src/backend/utils/adt: acl.c
> src/bin/initdb : initdb.sh
>
> Log message:
> Arrange for the default permissions on a database to allow temp table
> creation to world, but disallow temp table creation in template1. Per
> latest round of pghackers discussion.
> I did not force initdb, but the permissions lockdown on template1 will
> not take effect unless you do one (or manually REVOKE TEMP ON DATABASE template1 FROM public).
>
>
> ---------------------------(end of broadcast)---------------------------
> TIP 1: subscribe and unsubscribe commands go to majordomo(at)postgresql(dot)org
>
--
Bruce Momjian | http://candle.pha.pa.us
pgman(at)candle(dot)pha(dot)pa(dot)us | (610) 359-1001
+ If your life is a hard drive, | 13 Roberts Road
+ Christ can be your backup. | Newtown Square, Pennsylvania 19073
| From: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
|---|---|
| To: | Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> |
| Cc: | pgsql-committers(at)postgresql(dot)org |
| Subject: | Re: pgsql-server/ oc/src/sgml/ref/grant.sgml rc/ba ... |
| Date: | 2002-09-03 23:00:42 |
| Message-ID: | [email protected] |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Lists: | pgsql-committers |
Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> writes:
> I wonder if you should force initdb to make sure everyone during beta
> has the same configuration.
Not worth it. If we get a bug "I can create temp tables in template1,
but I shouldn't be able to" we'll know why, and I don't really foresee
any other risks ...
regards, tom lane