Lamar Owen wrote:
> On Tuesday 30 July 2002 11:51 pm, Tom Lane wrote:
> > Lamar Owen <lamar.owen@wgcr.org> writes:
> > >> CREATE DATABASE foo WITH LOCATION = 'BAR'
> > > And requires you to be a database superuser anyway.
>
> > CREATE DATABASE does not require superuser privs, only createdb
> > which is not usually considered particular dangerous.
>
> Pardon my misspeak, as there are those two components to the privs. My error.
> Typically normal users aren't given create database privileges -- at least on
> my systems.
>
> And, again, I'm completely for the idea of this being in postgresql.conf. But
> I'm not convinced that the security angle is a valid reason. The consistency
> reason is enough alone to warrant it being that way.
Agreed. Consistency argues for the postgresql.conf solution, not
security. Also, I would like to see initlocation removed as soon as we
get a 100% functional replacement. We have fielded too many questions
about how to set it up.
-- Bruce Momjian | http://candle.pha.pa.us pgman@candle.pha.pa.us | (610)
853-3000+ If your life is a hard drive, | 830 Blythe Avenue + Christ can be your backup. | Drexel Hill,
Pennsylvania19026
