Re: Heavy security bug in 7.2.2-16? - Mailing list pgsql-novice

From Tom Lane
Subject Re: Heavy security bug in 7.2.2-16?
Date
Msg-id 22197.1040966809@sss.pgh.pa.us
Whole thread Raw
In response to Heavy security bug in 7.2.2-16?  (Heiko Schroeder <heikos@foni.net>)
Responses sequence generator programmatic invocation (preferably JDBC)
List pgsql-novice
Heiko Schroeder <heikos@foni.net> writes:
> Especially when the superuser postmaster creates a database, e.g. test, a
> normal user although he is *not* the owner, if it is not denied that he can
> create new databases AND that he can create new users,

A user that can create new users is a superuser; there is no distinction
in Postgres.  As a superuser, there are no protection restrictions on
him.

            regards, tom lane

pgsql-novice by date:

Previous
From: Heiko Schroeder
Date:
Subject: Heavy security bug in 7.2.2-16?
Next
From: "Reshat Sabiq"
Date:
Subject: sequence generator programmatic invocation (preferably JDBC)