Message-ID: <4DD69445.3070507@lelarge.info>
Date: Fri, 20 May 2011 18:18:13 +0200
From: Guillaume Lelarge <guillaume@lelarge.info>
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US;
	rv:1.9.2.17) Gecko/20110424 Thunderbird/3.1.10
MIME-Version: 1.0
To: Derrick Rice <derrick.rice@gmail.com>
CC: pgsql-docs@postgresql.org
Subject: Re: DROP TABLE can be issued by schema owner as well as table
 owner
References: <BANLkTikpQfBj8EMwjwrA1kXOF1F8J4H6Hw@mail.gmail.com>
In-Reply-To: <BANLkTikpQfBj8EMwjwrA1kXOF1F8J4H6Hw@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit

Le 05/20/2011 05:42 PM, Derrick Rice a écrit :
> According to
> 
> http://www.postgresql.org/docs/9.0/interactive/sql-droptable.html
> 
> "DROP TABLE removes tables from the database. Only its owner can drop a
> table."
> 
> In fact, the schema owner can drop the table, which is clearly stated here:
> 
> http://www.postgresql.org/docs/9.0/interactive/sql-dropschema.html
> 
> "A schema can only be dropped by its owner or a superuser. Note that the
> owner can drop the schema (and thereby all contained objects) even if he
> does not own some of the objects within the schema."
> 
> There are likely other places besides the DROP TABLE page which can be
> misleading with regard to ability to drop a table.  This should be made more
> clear, since in (possibly contrived) circumstances, being able to drop a
> table and recreate an exactly similar table may be a vulnerability (if the
> design assumed the table could only be dropped by the owner).
> 
> (Just joined the list to post this -- sorry if it has already been brought
> up)
> 

Well, for a specific object, any superuser, the database owner, the
schema owner, and the object owner could drop the object. This is not a
vulnerability.


-- 
Guillaume
 http://www.postgresql.fr
 http://dalibo.com