| commit | 38b15fd7fe8718633f6572168c4083468aae5eec | |
| author | tgl <tgl> | |
| Thu, 31 Jul 2008 16:27:16 +0000 (31 16:27 +0000) | ||
| committer | tgl <tgl> | |
| Thu, 31 Jul 2008 16:27:16 +0000 (31 16:27 +0000) | ||
| tree | 996c8249b3cbb7a6fdf1d8c1d38cff87caf6ca84 | treesnapshot (tar.gz zip) |
| parent | fec787d7df1d4acc1203e6a20500bbada74341a2 | commitdiff |
Require superuser privilege to create base types (but not composites, enums,
or domains). This was already effectively required because you had to own
the I/O functions, and the I/O functions pretty much have to be written in
C since we don't let PL functions take or return cstring. But given the
possible security consequences of a malicious type definition, it seems
prudent to enforce superuser requirement directly. Per recent discussion.
or domains). This was already effectively required because you had to own
the I/O functions, and the I/O functions pretty much have to be written in
C since we don't let PL functions take or return cstring. But given the
possible security consequences of a malicious type definition, it seems
prudent to enforce superuser requirement directly. Per recent discussion.
| doc/src/sgml/ref/create_type.sgml | diffblobblamehistory | |
| src/backend/commands/typecmds.c | diffblobblamehistory |