Re: dropping user doesn't erase his rights. - Mailing list pgsql-bugs

From Hubert depesz Lubaczewski
Subject Re: dropping user doesn't erase his rights.
Date
Msg-id 20030109164030.GA1199@depesz.pl
Whole thread Raw
In response to Re: dropping user doesn't erase his rights.  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: dropping user doesn't erase his rights.
List pgsql-bugs
On Thu, Jan 09, 2003 at 11:21:56AM -0500, Tom Lane wrote:
> Difficult to do, when those privileges might be recorded in databases
> you're not even connected to at the time of the drop.

I belive it would be pretty difficult, but leaving it "just like that"
creates ssecurity breach (imagine someone droping user, beliving that
everytinh is o.k.), than someone else creates different user but with
keeping unused sysid (this might be the case with system users and
keeping system user-id with database user-id the same) - which happens
to be "not unused". i'm not sure if i'm clear about it.

depesz

--=20
hubert depesz lubaczewski                          http://www.depesz.pl/
>  wynajm=EA mieszkanie - 60 metr=F3w, 3 pokoje, piast=F3w - od lutego (po =
  <
-=3D>       remoncie) interesuje ci=EA - napisz: depesz@depesz.pl        <=
=3D-

pgsql-bugs by date:

Previous
From: Tom Lane
Date:
Subject: Re: dropping user doesn't erase his rights.
Next
From: Peter Eisentraut
Date:
Subject: Re: Libpq is not a shared library on Mac OS X