Postgres Pro
Downloads
Home   >   mailing lists

pgsql: Restrict pgstattuple functions to superusers. - Mailing list pgsql-committers

From tgl@postgresql.org (Tom Lane)
Subject pgsql: Restrict pgstattuple functions to superusers.
Date
Msg-id 20070828231113.0E07C754201@cvs.postgresql.org
Whole thread Raw
List pgsql-committers
Tree view 
Log Message:
-----------
Restrict pgstattuple functions to superusers.  While the only one that's
really a glaring security hole is bt_page_items, there's not a very good
use-case for letting ordinary users use 'em, either.

Tags:
----
REL8_2_STABLE

Modified Files:
--------------
    pgsql/contrib/pgstattuple:
        pgstatindex.c (r1.2.2.2 -> r1.2.2.3)
        (http://developer.postgresql.org/cvsweb.cgi/pgsql/contrib/pgstattuple/pgstatindex.c?r1=1.2.2.2&r2=1.2.2.3)
        pgstattuple.c (r1.25 -> r1.25.2.1)
        (http://developer.postgresql.org/cvsweb.cgi/pgsql/contrib/pgstattuple/pgstattuple.c?r1=1.25&r2=1.25.2.1)

pgsql-committers by date:

Previous
From: tgl@postgresql.org (Tom Lane)
Date:
Subject: pgsql: Reduce the permissions check needed to use pgrowlocks() to having
Next
From: tgl@postgresql.org (Tom Lane)
Date:
Subject: pgsql: Add a debug logging message when a resource manager rejects an