From: Tom Lane <tgl@sss.pgh.pa.us>
To: Stephen Frost <sfrost@snowman.net>
Cc: Robert Haas <robertmhaas@gmail.com>
Cc: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Cc: PostgreSQL Hackers <pgsql-hackers@lists.postgresql.org>
Subject: Re: Removing pg_pltemplate and creating "trustable" extensions
Date: Tue, 21 Jan 2020 12:40:12 -0500
Message-ID: <25342.1579628412@sss.pgh.pa.us> (raw)
In-Reply-To: <20200113205756.GL3195@tamriel.snowman.net>
References: <9933.1578599320@sss.pgh.pa.us>
<CAOuzzgr2YXEBsK6oaW-B0PCp7VbQ5XujZ6qFGJbWYgyHkHZxvw@mail.gmail.com>
<12039.1578602021@sss.pgh.pa.us>
<20200110192646.GZ3195@tamriel.snowman.net>
<16979.1578685198@sss.pgh.pa.us>
<CA+TgmoYry3gSXN98s8hVyf8GVzTuqV8WuhCvpxNzMFEOdvx84w@mail.gmail.com>
<20200110205003.GD3195@tamriel.snowman.net>
<27618.1578696790@sss.pgh.pa.us>
<20200113184019.GF3195@tamriel.snowman.net>
<28604.1578947939@sss.pgh.pa.us>
<20200113205756.GL3195@tamriel.snowman.net>
Stephen Frost <sfrost@snowman.net> writes:
> * Tom Lane (tgl@sss.pgh.pa.us) wrote:
>> The patch as I'm proposing it has nothing to do with "CREATE" rights.
>> You're attacking something different from what I actually want to do.
> Yes, as an aside, I'm argueing that we should split up the general
> CREATE privileges, but I also said that's not required for this.
So how do we move this forward? I really don't want this patch to be
blocked by what's fundamentally a side point about permissions.
The minimum committable patch seems like it would just grant the
"can install trusted extensions" ability to DB owners, full stop.
This is small, it's exactly the same as our historical behavior for
trusted PLs, and it's upward compatible with either of two possible
future extensions:
* adding a predefined role (which'd let superusers give out the install
privilege, in addition to DB owners having it)
* converting DB owners' hard-wired privilege to a grantable privilege
(which'd let DB owners give out the install privilege, if the privilege
is attached to the DBs themselves; but maybe there's some other way?)
Given the lack of consensus about either of those being what we want,
it doesn't seem like we're going to come to an agreement in a
reasonable timeframe on a patch that includes either. So I'd like
to get this done and move on to the next problem (ie, what is it
we're actually going to do about the python 2/3 mess).
regards, tom lane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: tgl@sss.pgh.pa.us, sfrost@snowman.net, robertmhaas@gmail.com, peter.eisentraut@2ndquadrant.com, pgsql-hackers@lists.postgresql.org
Subject: Re: Removing pg_pltemplate and creating "trustable" extensions
In-Reply-To: <25342.1579628412@sss.pgh.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox