Re: Default permissions of system catalogs - Mailing list pgsql-hackers

From Dave Page
Subject Re: Default permissions of system catalogs
Date
Msg-id FED2B709E3270E4B903EB0175A49BCB10473E0@dogbert.vale-housing.co.uk
Whole thread Raw
In response to Default permissions of system catalogs  (Peter Eisentraut <peter_e@gmx.net>)
Responses Re: Default permissions of system catalogs  (Bruno Wolff III <bruno@[66.92.219.49]>)
Re: Default permissions of system catalogs  (Peter Eisentraut <peter_e@gmx.net>)
Re: Default permissions of system catalogs  (Bruce Momjian <pgman@candle.pha.pa.us>)
List pgsql-hackers

> -----Original Message-----
> From: Peter Eisentraut [mailto:peter_e@gmx.net] 
> Sent: 07 January 2002 22:36
> To: PostgreSQL Development
> Subject: Default permissions of system catalogs
> 
> 
> Currently, system catalogs (pg_*) are assumed to be readable 
> by anyone if the privileges are NULL, as opposed to ordinary 
> tables, which assume only owner access if the privileges are NULL.
> 
> I'm currently working on privileges for functions (see also 
> Nov. 13 message, which apparently stunned everyone into 
> silence), which will need some sort of similar arrangement, 
> only there's no obvious way to find out if a function is a 
> "system function".
> 
> I think the best solution would be to drop the pg_* exception 
> and explicitly grant the right privileges to each table and 
> function in initdb.
> 
> Objections?

I assume you are proposing the same privileges that you describe for a user
table (i.e. by default only the owner (==superuser) has any access)?

If so, this would break pgAdmin for any users who are not the superuser on
their system as the majority of it's operation relies on examining the
system catalogues. In this case I would *strongly* object.

<thinks...> Surely this would also be the case for psql though - have I
misunderstood something?

Regards, Dave.


pgsql-hackers by date:

Previous
From: Holger Krug
Date:
Subject: Re: ON ERROR triggers
Next
From: Stephan Szabo
Date:
Subject: Re: ON ERROR triggers