Postgres Pro
Downloads
Home   >   mailing lists

Re: [BUGS] Bug #549: select table privilege in postgres allows user to create index on the table - Mailing list pgsql-hackers

From Tom Lane
Subject Re: [BUGS] Bug #549: select table privilege in postgres allows user to create index on the table
Date
Msg-id 13279.1010076861@sss.pgh.pa.us
Whole thread Raw
Responses Re: [BUGS] Bug #549: select table privilege in postgres allows  (Bruce Momjian <pgman@candle.pha.pa.us>)
List pgsql-hackers
Tree view 
pgsql-bugs@postgresql.org writes:
> select table privilege  in postgres allows user to create index on the table

Actually, it appears that CREATE INDEX has no permission check at all.

I agree this is a bug.  Probably CREATE INDEX should require ownership
permission, the same as ALTER TABLE.
        regards, tom lane

pgsql-hackers by date:

Previous
From: Thomas Lockhart
Date:
Subject: Re: datetime error?
Next
From: Bruce Momjian
Date:
Subject: Re: LWLock contention: I think I understand the problem