Isn't template1 just that, a template?
If a user has the ability to create a user or database, then they should
be able to do it from anywhere.
Personally, I think normal users shouldn't have access to template1,
simply because they could create objects in there that can be copied
into _any_new_ database.
Peter
--
Peter Mount
Enterprise Support
Maidstone Borough Council
Any views stated are my own, and not those of Maidstone Borough Council.
-----Original Message-----
From: Bruce Momjian [mailto:pgman@candle.pha.pa.us]
Sent: Thursday, May 25, 2000 5:18 PM
To: PostgreSQL-development
Subject: [HACKERS] Create user/create database outside template1
What happens if people issue create user or create database outside
template1. Do we need to prevent it? Seems they work, but am not sure
it is OK. Do we need to add a check?
-- Bruce Momjian | http://www.op.net/~candle pgman@candle.pha.pa.us | (610)
853-3000+ If your life is a hard drive, | 830 Blythe Avenue + Christ can be your backup. | Drexel Hill,
Pennsylvania
19026