Postgres Pro
Downloads
Home   >   mailing lists

Re: Question: CREATE EXTENSION and create schema permission? - Mailing list pgsql-hackers

From Dimitri Fontaine
Subject Re: Question: CREATE EXTENSION and create schema permission?
Date
Msg-id m2boviwx7m.fsf@2ndQuadrant.fr
Whole thread Raw
In response to Re: Question: CREATE EXTENSION and create schema permission?  (Kohei KaiGai <kaigai@kaigai.gr.jp>)
Responses Re: Question: CREATE EXTENSION and create schema permission?
List pgsql-hackers
Tree view 
Kohei KaiGai <kaigai@kaigai.gr.jp> writes:
> The current implementation set the current user as owner of the new schema.
> The default permission check of schema allows owner to create several kinds
> of underlying objects.
>
> In the result, we may consider a scenario that a user without permissions to
> create new objects possibly get a schema created by CREATE EXTENSION
> that allows him to create new objects (such as table, function, ...).
>
> I don't think it is a desirable behavior. :-(

Agreed,
-- 
Dimitri Fontaine
http://2ndQuadrant.fr     PostgreSQL : Expertise, Formation et Support

pgsql-hackers by date:

Previous
From: Kohei KaiGai
Date:
Subject: Re: Question: CREATE EXTENSION and create schema permission?
Next
From: Simon Riggs
Date:
Subject: PushActiveSnapshot(GetTransactionSnapshot())