Re: Inheritance is a security loophole!

Поиск
Список
Период
Сортировка
От Bruce Momjian
Тема Re: Inheritance is a security loophole!
Дата
Msg-id 200012222001.PAA01595@candle.pha.pa.us
обсуждение исходный текст
Ответ на Inheritance is a security loophole!  (Tom Lane <tgl@sss.pgh.pa.us>)
Список pgsql-hackers
> I suppose a proper fix would involve adding a new permission type "can
> make child tables", but I don't want to mess with that at the moment.
> For 7.1, I propose that we only allow creation of child tables to the
> owner of the parent table.

I see no reason people would be inheriting from other people's tables. 
Let's disable it.

> PS: another interesting problem: create a temp table, then create a
> non-temp table that inherits from it.  Unhappiness ensues when you
> end your session.  Need to prohibit this combination, I think.

Clear example where mixing features causes strange behavour.  Part of
the UNION/TEMPORARY/subquery/aggregate/inheritance/rule/view/array mix.

--  Bruce Momjian                        |  http://candle.pha.pa.us pgman@candle.pha.pa.us               |  (610)
853-3000+  If your life is a hard drive,     |  830 Blythe Avenue +  Christ can be your backup.        |  Drexel Hill,
Pennsylvania19026
 


В списке pgsql-hackers по дате отправления:

Предыдущее
От: "Mikheev, Vadim"
Дата:
Сообщение: 7.0.3: order by func in union
Следующее
От: "Mikheev, Vadim"
Дата:
Сообщение: 7.1current: order by func in union