Re: AW: [Extern] Re: PG16.1 security breach? - Mailing list pgsql-general

From Adrian Klaver
Subject Re: AW: [Extern] Re: PG16.1 security breach?
Date
Msg-id 97b9b4c3-fb20-47e6-ba7f-e1d874ba2531@aklaver.com
Whole thread Raw
In response to AW: [Extern] Re: PG16.1 security breach?  ("Zwettler Markus (OIZ)" <Markus.Zwettler@zuerich.ch>)
List pgsql-general
On 6/7/24 06:54, Zwettler Markus (OIZ) wrote:
>> -----Ursprüngliche Nachricht-----
>> Von: Joe Conway <mail@joeconway.com>
>> Gesendet: Freitag, 7. Juni 2024 15:22
>> An: Zwettler Markus (OIZ) <Markus.Zwettler@zuerich.ch>; pgsql-
>> general@lists.postgresql.org
>> Betreff: [Extern] Re: PG16.1 security breach?
>>
>> On 6/7/24 07:04, Zwettler Markus (OIZ) wrote:

> 
> Argh. No! What a bad habit!
> 
> Might be good idea for an enhancement request to create a global parameter to disable this habit.

Read this

https://www.postgresql.org/docs/current/ddl-priv.html

through several times, it will make things clearer. In particular the 
part that starts "PostgreSQL grants privileges on some types of objects 
to PUBLIC by default when the objects are created. ..."

> 
> Thanks Markus
> 

-- 
Adrian Klaver
adrian.klaver@aklaver.com




pgsql-general by date:

Previous
From: Laurenz Albe
Date:
Subject: Re: AW: [Extern] Re: PG16.1 security breach?
Next
From: "David G. Johnston"
Date:
Subject: PG16.1 security breach?