Users + Groups = Roles, duplicate name issue

Поиск
Список
Период
Сортировка
От ljb
Тема Users + Groups = Roles, duplicate name issue
Дата
Msg-id doabtl$q00$1@news.hub.org
обсуждение исходный текст
Ответы Re: Users + Groups = Roles, duplicate name issue  ("Jim C. Nasby" <jnasby@pervasive.com>)
Список pgsql-admin
I loaded a 7.4.x dump into a new 8.1.1 database and found out what happens
if you had the same name as both a user and a group. You can get users with
more rights than they had before.  I guess it is too late, but perhaps a
mention in the release text would have been a good idea. Advise people to
rename any group which has the same name as a user.

For example, if at 7.4.x I have:
  Group:    Is granted all rights to table:
    test      test_data
    acct      money_data

  Username:   Member of group:   And therefore gets all rights to table:
    ljb         test               test_data
    test        acct               money_data

After loading the dump into 8.1.1, the test user and test group get merged
into a single role, so the test user gets granted all rights to the test_data
table. In addition, 'ljb' now effectively is a member of the 'acct' group
(via the test role), so is granted all rights to the money_data table.

В списке pgsql-admin по дате отправления:

Предыдущее
От: Alvaro Herrera
Дата:
Сообщение: Re: WITH SYSID feature dropped
Следующее
От: Zep
Дата:
Сообщение: postgres on gentoo.