Re: untrusted PLs should be GRANTable - Mailing list pgsql-hackers

From Stephen Frost
Subject Re: untrusted PLs should be GRANTable
Date
Msg-id 20180719001958.GZ27724@tamriel.snowman.net
Whole thread Raw
In response to Re: untrusted PLs should be GRANTable  (Peter Eisentraut <peter.eisentraut@2ndquadrant.com>)
List pgsql-hackers
Greetings,

* Peter Eisentraut (peter.eisentraut@2ndquadrant.com) wrote:
> On 17.07.18 07:20, Craig Ringer wrote:
> > A user has raised the point that our refusal to GRANT rights to
> > untrusted PLs is counterproductive and inconsistent with how we behave
> > elsewhere.
>
> Previous discussion:
> https://www.postgresql.org/message-id/flat/1357905627.24219.6.camel%40vanquo.pezone.net
>
> What caused that to die was "What might actually be a problem in this
> area is that, AFAICT, pg_dump does not save privileges granted to
> objects in extensions."  But I think that is fixed/fixable now with
> pg_init_privs.

Yes, that should certainly be fixed now thanks to pg_init_privs.  If it
isn't, I'd like to know...

Thanks,

Stephen

Attachment

pgsql-hackers by date:

Previous
From: Michael Paquier
Date:
Subject: Re: print_path is missing GatherMerge and CustomScan support
Next
From: "Joshua D. Drake"
Date:
Subject: Re: Have an encrypted pgpass file