pg.ddx.io  pgsql-committers@postgresql.org mailing list archive  
help / color / mirror / Atom feed
pgsql: Remove ALTER DEFAULT PRIVILEGES' requirement of schema CREATE pe
4+ messages / 1 participants
[nested] [flat]

* pgsql: Remove ALTER DEFAULT PRIVILEGES' requirement of schema CREATE pe
@ 2013-06-09 19:27  Tom Lane <tgl@sss.pgh.pa.us>
  0 siblings, 0 replies; 4+ messages in thread

From: Tom Lane @ 2013-06-09 19:27 UTC (permalink / raw)
  To: pgsql-committers

Remove ALTER DEFAULT PRIVILEGES' requirement of schema CREATE permissions.

Per discussion, this restriction isn't needed for any real security reason,
and it seems to confuse people more often than it helps them.  It could
also result in some database states being unrestorable.  So just drop it.

Back-patch to 9.0, where ALTER DEFAULT PRIVILEGES was introduced.

Branch
------
master

Details
-------
http://git.postgresql.org/pg/commitdiff/f3839ea117fba6fdb69c75a1fe145aa86a4c8ae3

Modified Files
--------------
doc/src/sgml/ref/alter_default_privileges.sgml |    4 ++--
src/backend/catalog/aclchk.c                   |   25 ++++++++++++------------
2 files changed, 14 insertions(+), 15 deletions(-)


-- 
Sent via pgsql-committers mailing list (pgsql-committers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-committers


^ permalink  raw  reply  [nested|flat] 4+ messages in thread

* pgsql: Remove ALTER DEFAULT PRIVILEGES' requirement of schema CREATE pe
@ 2013-06-09 19:27  Tom Lane <tgl@sss.pgh.pa.us>
  0 siblings, 0 replies; 4+ messages in thread

From: Tom Lane @ 2013-06-09 19:27 UTC (permalink / raw)
  To: pgsql-committers

Remove ALTER DEFAULT PRIVILEGES' requirement of schema CREATE permissions.

Per discussion, this restriction isn't needed for any real security reason,
and it seems to confuse people more often than it helps them.  It could
also result in some database states being unrestorable.  So just drop it.

Back-patch to 9.0, where ALTER DEFAULT PRIVILEGES was introduced.

Branch
------
REL9_2_STABLE

Details
-------
http://git.postgresql.org/pg/commitdiff/5f4a3116865c6482f6e62f4ec4c9152053bc28ca

Modified Files
--------------
doc/src/sgml/ref/alter_default_privileges.sgml |    4 ++--
src/backend/catalog/aclchk.c                   |   25 ++++++++++++------------
2 files changed, 14 insertions(+), 15 deletions(-)


-- 
Sent via pgsql-committers mailing list (pgsql-committers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-committers


^ permalink  raw  reply  [nested|flat] 4+ messages in thread

* pgsql: Remove ALTER DEFAULT PRIVILEGES' requirement of schema CREATE pe
@ 2013-06-09 19:27  Tom Lane <tgl@sss.pgh.pa.us>
  0 siblings, 0 replies; 4+ messages in thread

From: Tom Lane @ 2013-06-09 19:27 UTC (permalink / raw)
  To: pgsql-committers

Remove ALTER DEFAULT PRIVILEGES' requirement of schema CREATE permissions.

Per discussion, this restriction isn't needed for any real security reason,
and it seems to confuse people more often than it helps them.  It could
also result in some database states being unrestorable.  So just drop it.

Back-patch to 9.0, where ALTER DEFAULT PRIVILEGES was introduced.

Branch
------
REL9_1_STABLE

Details
-------
http://git.postgresql.org/pg/commitdiff/aee8a60c7232cc048e00a704fca49730a722432a

Modified Files
--------------
doc/src/sgml/ref/alter_default_privileges.sgml |    4 ++--
src/backend/catalog/aclchk.c                   |   25 ++++++++++++------------
2 files changed, 14 insertions(+), 15 deletions(-)


-- 
Sent via pgsql-committers mailing list (pgsql-committers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-committers


^ permalink  raw  reply  [nested|flat] 4+ messages in thread

* pgsql: Remove ALTER DEFAULT PRIVILEGES' requirement of schema CREATE pe
@ 2013-06-09 19:27  Tom Lane <tgl@sss.pgh.pa.us>
  0 siblings, 0 replies; 4+ messages in thread

From: Tom Lane @ 2013-06-09 19:27 UTC (permalink / raw)
  To: pgsql-committers

Remove ALTER DEFAULT PRIVILEGES' requirement of schema CREATE permissions.

Per discussion, this restriction isn't needed for any real security reason,
and it seems to confuse people more often than it helps them.  It could
also result in some database states being unrestorable.  So just drop it.

Back-patch to 9.0, where ALTER DEFAULT PRIVILEGES was introduced.

Branch
------
REL9_0_STABLE

Details
-------
http://git.postgresql.org/pg/commitdiff/1476a94a48eec20b5884a0a2043aa28204155d33

Modified Files
--------------
doc/src/sgml/ref/alter_default_privileges.sgml |    4 ++--
src/backend/catalog/aclchk.c                   |   26 +++++++++++-------------
2 files changed, 14 insertions(+), 16 deletions(-)


-- 
Sent via pgsql-committers mailing list (pgsql-committers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-committers


^ permalink  raw  reply  [nested|flat] 4+ messages in thread


end of thread, other threads:[~2013-06-09 19:27 UTC | newest]

Thread overview: 4+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2013-06-09 19:27 pgsql: Remove ALTER DEFAULT PRIVILEGES' requirement of schema CREATE pe Tom Lane <tgl@sss.pgh.pa.us>
2013-06-09 19:27 pgsql: Remove ALTER DEFAULT PRIVILEGES' requirement of schema CREATE pe Tom Lane <tgl@sss.pgh.pa.us>
2013-06-09 19:27 pgsql: Remove ALTER DEFAULT PRIVILEGES' requirement of schema CREATE pe Tom Lane <tgl@sss.pgh.pa.us>
2013-06-09 19:27 pgsql: Remove ALTER DEFAULT PRIVILEGES' requirement of schema CREATE pe Tom Lane <tgl@sss.pgh.pa.us>

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox