pg_dump, pg_dumpall and createdb privilege - Mailing list pgsql-hackers

From Thomas Swan
Subject pg_dump, pg_dumpall and createdb privilege
Date
Msg-id 3D614996.20707@idigx.com
Whole thread Raw
Responses Re: pg_dump, pg_dumpall and createdb privilege  (Neil Conway <neilc@samurai.com>)
List pgsql-hackers
Using pg_dump  and pg_dumpall I ran into the following problems and had 
addressed it earlier to this list with no response.

Using PostgreSQL 7.2.x

1. create a user with createdb privilege.
2. create a database as that user (allowing that user full reign over 
that particular db)
3. drop the createdb from the user.
4. pg_dumpall the databases to a single file
5. either use pg_restore or psql < infile to restore the databases and 
it fails.

The problem is that the user does not have createdb privilege and 
therefore the system cannot create a database with that particular user 
as the owner.

Is it possible to address this before the 7.3 release or is this concern 
no longer a problem in the 7.3 branch?





pgsql-hackers by date:

Previous
From: Florian Weimer
Date:
Subject: Re: [SECURITY] DoS attack on backend possible
Next
From: Neil Conway
Date:
Subject: Re: pg_dump, pg_dumpall and createdb privilege