Thread: GRANT on functions/languages
Now that we have relaxed the restriction on functions/languages, should we make sure we have GRANTS for all of them, including /contrib, or remove them all. Not knowing what we will do for 7.4, it seems we should make sure they all have GRANTs. Comments? -- Bruce Momjian | http://candle.pha.pa.us pgman@candle.pha.pa.us | (610) 359-1001+ If your life is a hard drive, | 13 Roberts Road + Christ can be your backup. | Newtown Square, Pennsylvania19073
Bruce Momjian <pgman@candle.pha.pa.us> writes:
> Now that we have relaxed the restriction on functions/languages, should
> we make sure we have GRANTS for all of them, including /contrib, or
> remove them all.
I feel no strong need to do anything. The contrib entries that have
explicit GRANTs are okay and pretty future-proof; but the ones that
don't have 'em are not broken. We have other problems to contend with
that deserve more attention than this one...
regards, tom lane
Tom Lane wrote: > Bruce Momjian <pgman@candle.pha.pa.us> writes: > > Now that we have relaxed the restriction on functions/languages, should > > we make sure we have GRANTS for all of them, including /contrib, or > > remove them all. > > I feel no strong need to do anything. The contrib entries that have > explicit GRANTs are okay and pretty future-proof; but the ones that > don't have 'em are not broken. We have other problems to contend with > that deserve more attention than this one... I was looking for consistency so we could have things ready if we tighten up in 7.4. I believe someone volunteered to fix them all so I figured we should do that. -- Bruce Momjian | http://candle.pha.pa.us pgman@candle.pha.pa.us | (610) 359-1001+ If your life is a hard drive, | 13 Roberts Road + Christ can be your backup. | Newtown Square, Pennsylvania19073
Bruce Momjian <pgman@candle.pha.pa.us> writes:
> I was looking for consistency so we could have things ready if we
> tighten up in 7.4. I believe someone volunteered to fix them all so I
> figured we should do that.
Someone did volunteer, but I haven't seen results. My point is that
it's not important as things stand. If anyone wants to go through the
contrib functions and introduce some consistency, it would be much more
useful to check their strictness and volatility attributes ... not to
mention converting them all to v1 call convention for portability's sake
...
regards, tom lane
Tom Lane wrote: > Bruce Momjian <pgman@candle.pha.pa.us> writes: > > I was looking for consistency so we could have things ready if we > > tighten up in 7.4. I believe someone volunteered to fix them all so I > > figured we should do that. > > Someone did volunteer, but I haven't seen results. My point is that > it's not important as things stand. If anyone wants to go through the > contrib functions and introduce some consistency, it would be much more > useful to check their strictness and volatility attributes ... not to > mention converting them all to v1 call convention for portability's sake > ... In my mind, the big question is whether we need things to be done in a certain way now so we can tighten function/language permissions in 7.4 if we want to. For 7.3, we had to relax because of upgrade problems, but if we want to tighten for 7.4, we have to plan that now. -- Bruce Momjian | http://candle.pha.pa.us pgman@candle.pha.pa.us | (610) 359-1001+ If your life is a hard drive, | 13 Roberts Road + Christ can be your backup. | Newtown Square, Pennsylvania19073