DROP TABLE can be issued by schema owner as well as table owner - Mailing list pgsql-docs

From Derrick Rice
Subject DROP TABLE can be issued by schema owner as well as table owner
Date
Msg-id BANLkTikpQfBj8EMwjwrA1kXOF1F8J4H6Hw@mail.gmail.com
Whole thread Raw
Responses Re: DROP TABLE can be issued by schema owner as well as table owner
Re: DROP TABLE can be issued by schema owner as well as table owner
List pgsql-docs
According to

http://www.postgresql.org/docs/9.0/interactive/sql-droptable.html

"DROP TABLE removes tables from the database. Only its owner can drop a table."

In fact, the schema owner can drop the table, which is clearly stated here:

http://www.postgresql.org/docs/9.0/interactive/sql-dropschema.html

"A schema can only be dropped by its owner or a superuser. Note that the owner can drop the schema (and thereby all contained objects) even if he does not own some of the objects within the schema."

There are likely other places besides the DROP TABLE page which can be misleading with regard to ability to drop a table.  This should be made more clear, since in (possibly contrived) circumstances, being able to drop a table and recreate an exactly similar table may be a vulnerability (if the design assumed the table could only be dropped by the owner).

(Just joined the list to post this -- sorry if it has already been brought up)

Derrick

pgsql-docs by date:

Previous
From: Susanne Ebrecht
Date:
Subject: Re: non-ASCII characters in SGML documentation (and elsewhere)
Next
From: Guillaume Lelarge
Date:
Subject: Re: DROP TABLE can be issued by schema owner as well as table owner