Re: privileges regression problem on freebsd/alpha - Mailing list pgsql-hackers

From Bruce Momjian
Subject Re: privileges regression problem on freebsd/alpha
Date
Msg-id 200203142120.g2ELKIg09737@candle.pha.pa.us
Whole thread Raw
In response to privileges regression problem on freebsd/alpha  ("Christopher Kings-Lynne" <chriskl@familyhealth.com.au>)
Responses Re: privileges regression problem on freebsd/alpha  ("Christopher Kings-Lynne" <chriskl@familyhealth.com.au>)
List pgsql-hackers
Christopher, is this problem fixed now?

---------------------------------------------------------------------------

Christopher Kings-Lynne wrote:
> Hi all,
> 
> Just tested latest CVS on my freebsd/alpha.  Only one test failed, and
> that's privileges related...
> 
> *** ./expected/privileges.out    Thu Mar  7 09:53:51 2002
> --- ./results/privileges.out    Fri Mar  8 11:03:36 2002
> ***************
> *** 201,218 ****
>   CREATE FUNCTION testfunc1(int) RETURNS int AS 'select 2 * $1;' LANGUAGE
> sql;
>   CREATE FUNCTION testfunc2(int) RETURNS int AS 'select 3 * $1;' LANGUAGE
> sql;
>   GRANT EXECUTE ON FUNCTION testfunc1(int), testfunc2(int) TO regressuser2;
>   GRANT USAGE ON FUNCTION testfunc1(int) TO regressuser3; -- semantic error
> ! ERROR:  invalid privilege type USAGE for function object
>   GRANT ALL PRIVILEGES ON FUNCTION testfunc1(int) TO regressuser4;
>   GRANT ALL PRIVILEGES ON FUNCTION testfunc_nosuch(int) TO regressuser4;
> ! ERROR:  Function 'testfunc_nosuch(int4)' does not exist
>   SET SESSION AUTHORIZATION regressuser2;
>   SELECT testfunc1(5), testfunc2(5); -- ok
> !  testfunc1 | testfunc2
> ! -----------+-----------
> !         10 |        15
> ! (1 row)
> !
>   CREATE FUNCTION testfunc3(int) RETURNS int AS 'select 2 * $1;' LANGUAGE
> sql; -- fail
>   ERROR:  permission denied
>   SET SESSION AUTHORIZATION regressuser3;
> --- 201,216 ----
>   CREATE FUNCTION testfunc1(int) RETURNS int AS 'select 2 * $1;' LANGUAGE
> sql;
>   CREATE FUNCTION testfunc2(int) RETURNS int AS 'select 3 * $1;' LANGUAGE
> sql;
>   GRANT EXECUTE ON FUNCTION testfunc1(int), testfunc2(int) TO regressuser2;
> + ERROR:  bogus GrantStmt.objtype 458
>   GRANT USAGE ON FUNCTION testfunc1(int) TO regressuser3; -- semantic error
> ! ERROR:  bogus GrantStmt.objtype 458
>   GRANT ALL PRIVILEGES ON FUNCTION testfunc1(int) TO regressuser4;
> + ERROR:  bogus GrantStmt.objtype 458
>   GRANT ALL PRIVILEGES ON FUNCTION testfunc_nosuch(int) TO regressuser4;
> ! ERROR:  bogus GrantStmt.objtype 458
>   SET SESSION AUTHORIZATION regressuser2;
>   SELECT testfunc1(5), testfunc2(5); -- ok
> ! ERROR:  permission denied
>   CREATE FUNCTION testfunc3(int) RETURNS int AS 'select 2 * $1;' LANGUAGE
> sql; -- fail
>   ERROR:  permission denied
>   SET SESSION AUTHORIZATION regressuser3;
> ***************
> *** 220,230 ****
>   ERROR:  permission denied
>   SET SESSION AUTHORIZATION regressuser4;
>   SELECT testfunc1(5); -- ok
> !  testfunc1
> ! -----------
> !         10
> ! (1 row)
> !
>   DROP FUNCTION testfunc1(int); -- fail
>   ERROR:  RemoveFunction: function 'testfunc1': permission denied
>   \c -
> --- 218,224 ----
>   ERROR:  permission denied
>   SET SESSION AUTHORIZATION regressuser4;
>   SELECT testfunc1(5); -- ok
> ! ERROR:  permission denied
>   DROP FUNCTION testfunc1(int); -- fail
>   ERROR:  RemoveFunction: function 'testfunc1': permission denied
>   \c -
> 
> ======================================================================

[ Attachment, skipping... ]

[ Attachment, skipping... ]

> 
> ---------------------------(end of broadcast)---------------------------
> TIP 2: you can get off all lists at once with the unregister command
>     (send "unregister YourEmailAddressHere" to majordomo@postgresql.org)

--  Bruce Momjian                        |  http://candle.pha.pa.us pgman@candle.pha.pa.us               |  (610)
853-3000+  If your life is a hard drive,     |  830 Blythe Avenue +  Christ can be your backup.        |  Drexel Hill,
Pennsylvania19026
 


pgsql-hackers by date:

Previous
From: Greg Copeland
Date:
Subject: Re: Client/Server compression?
Next
From: Bruce Momjian
Date:
Subject: Re: Allowing usernames in pg_hba.conf