Postgres Pro
Downloads
Home   >   mailing lists

pgsql: Restrict non-superusers to password authenticated connections to - Mailing list pgsql-committers

From joe@postgresql.org (Joe Conway)
Subject pgsql: Restrict non-superusers to password authenticated connections to
Date
Msg-id 20070709013244.BD6B99FB592@postgresql.org
Whole thread Raw
List pgsql-committers
Tree view 
Log Message:
-----------
Restrict non-superusers to password authenticated connections
to prevent possible escalation of privilege. Provide new SECURITY
DEFINER functions with old behavior, but initially REVOKE ALL
from public for these functions. Per list discussion and design
proposed by Tom Lane.

Tags:
----
REL8_1_STABLE

Modified Files:
--------------
    pgsql/contrib/dblink:
        dblink.c (r1.48.2.3 -> r1.48.2.4)
        (http://developer.postgresql.org/cvsweb.cgi/pgsql/contrib/dblink/dblink.c.diff?r1=1.48.2.3&r2=1.48.2.4)
        dblink.sql.in (r1.9 -> r1.9.6.1)
        (http://developer.postgresql.org/cvsweb.cgi/pgsql/contrib/dblink/dblink.sql.in.diff?r1=1.9&r2=1.9.6.1)
    pgsql/contrib/dblink/doc:
        connection (r1.3 -> r1.3.2.1)
        (http://developer.postgresql.org/cvsweb.cgi/pgsql/contrib/dblink/doc/connection.diff?r1=1.3&r2=1.3.2.1)

pgsql-committers by date:

Previous
From: joe@postgresql.org (Joe Conway)
Date:
Subject: pgsql: Restrict non-superusers to password authenticated connections to
Next
From: joe@postgresql.org (Joe Conway)
Date:
Subject: pgsql: Restrict non-superusers to password authenticated connections to