Re: [HACKERS] Re: Bug#21681: postgresql: Doesn't allow granting to - Mailing list pgsql-hackers

From Bruce Momjian
Subject Re: [HACKERS] Re: Bug#21681: postgresql: Doesn't allow granting to
Date
Msg-id 199804290357.XAA05953@candle.pha.pa.us
Whole thread Raw
In response to Re: [HACKERS] Re: Bug#21681: postgresql: Doesn't allow granting to www-data  ("Thomas G. Lockhart" <lockhart@alumni.caltech.edu>)
List pgsql-hackers
>
> More info on the GRANT problem with user names containing a minus sign:
>
> It turns out that "+-=" are used inside an ACL string constructed
> internally in the backend. So, putting one of those characters into the
> user name causes what follows to be misinterpreted.
>
>  * aclparse
>  *      Consumes and parses an ACL specification of the form:
>  *              [group|user] [A-Za-z0-9]*[+-=][rwaR]*
>
> I think that we would need to restructure this internal information to
> make the user name field unambiguous no matter its contents.
>
> Bruce, can you put this on the ToDo list? In the meantime I would
> suggest _not_ restricting the allowable user names elsewhere, since this
> is a bug fix kind of thing...

Added to TODO:

* Restructure storing of GRANT permission information to allow +-=


--
Bruce Momjian                          |  830 Blythe Avenue
maillist@candle.pha.pa.us              |  Drexel Hill, Pennsylvania 19026
  +  If your life is a hard drive,     |  (610) 353-9879(w)
  +  Christ can be your backup.        |  (610) 853-3000(h)

pgsql-hackers by date:

Previous
From: "Thomas G. Lockhart"
Date:
Subject: Re: [HACKERS] Re: Bug#21681: postgresql: Doesn't allow granting to www-data
Next
From: dg@illustra.com (David Gould)
Date:
Subject: Re: [HACKERS] Revised proposal for libpq and FE/BE protocol changes