Re: [GENERAL] Re: grant privileges to a database - Mailing list pgsql-hackers

From Dan Wilson
Subject Re: [GENERAL] Re: grant privileges to a database
Date
Msg-id 000701c08bd6$b6dea280$543987cf@corp.peoplesoft.com
Whole thread Raw
In response to Re: [GENERAL] Re: grant privileges to a database  (Michael Fork <mfork@toledolink.com>)
List pgsql-hackers
: El Mié 31 Ene 2001 18:32, Dan Wilson escribió:
: > You can do this in phpPgAdmin... it's a hack because it just pulls in
all
: > the objects/relations and runs a single grant statement on them, but it
: > works.  It puts together a query like the following:
: >
: > GRANT ALL ON table1, table2, table3, view1, view2, sequence1, sequence2
TO
: > user
: >
: > Which I suppose you can do manually if you don't have phpPgAdmin
installed.
: >
: > It ain't the prettiest, but it works!
:
: The problem is that this is not what I'm looking for. I want the user to
be
: able to create new tables, views, sequences, etc on that database.

Oh, if you want to do that, then you don't have to do any granting of
priviledges.  It seems that Postgres allows any user to create a table on a
database.  Even if the user is not the owner of the database.  AFAIK, there
are no acl's associated with the database.

I've posed this question before and have not received any response, but is
this an undocumented feature or a sercurity bug?  Personally, I don't think
anyone should be able to create relations on a database they do not own.

-Dan


pgsql-hackers by date:

Previous
From: "Mitch Vincent"
Date:
Subject: PostgreSQL -> PHP problem
Next
From: "Mike Miller"
Date:
Subject: Re: Re: grant privileges to a database [URGENT]