pg.ddx.io  pgsql-hackers@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Stephen Frost <sfrost@snowman.net>
Cc: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Cc: PostgreSQL Hackers <pgsql-hackers@lists.postgresql.org>
Cc: Robert Haas <robertmhaas@gmail.com>
Subject: Re: Removing pg_pltemplate and creating "trustable" extensions
Date: Tue, 28 Jan 2020 17:35:00 -0500
Message-ID: <29811.1580250900@sss.pgh.pa.us> (raw)
In-Reply-To: <CAOuzzgqqq4-K1AT_bDzQP8+ukFK+CrFD2B9WN1CY6ZQdUrJxGw@mail.gmail.com>
References: <12039.1578602021@sss.pgh.pa.us>
	<20200110192646.GZ3195@tamriel.snowman.net>
	<16979.1578685198@sss.pgh.pa.us>
	<CA+TgmoYry3gSXN98s8hVyf8GVzTuqV8WuhCvpxNzMFEOdvx84w@mail.gmail.com>
	<20200110205003.GD3195@tamriel.snowman.net>
	<27618.1578696790@sss.pgh.pa.us>
	<20200113184019.GF3195@tamriel.snowman.net>
	<28604.1578947939@sss.pgh.pa.us>
	<20200113205756.GL3195@tamriel.snowman.net>
	<25342.1579628412@sss.pgh.pa.us>
	<20200128202918.GJ3195@tamriel.snowman.net>
	<5544.1580244756@sss.pgh.pa.us>
	<CA+Tgmob8d4iaD_nxdmugGbfc=USkm4ZA_NOkY2mK8B6s4oaBMg@mail.gmail.com>
	<23814.1580246216@sss.pgh.pa.us>
	<CAOuzzgqqq4-K1AT_bDzQP8+ukFK+CrFD2B9WN1CY6ZQdUrJxGw@mail.gmail.com>

Stephen Frost <sfrost@snowman.net> writes:
> On Tue, Jan 28, 2020 at 16:17 Tom Lane <tgl@sss.pgh.pa.us> wrote:
>> On the other hand, there's the point that lots of people have probably
>> given out schema-CREATE privilege to users whom they wouldn't necessarily
>> wish to trust with INSTALL privilege.  Schema-CREATE is a pretty harmless
>> privilege, INSTALL much less so.

> CREATE doesn’t just control the ability to create schemas these days- it
> was extended to cover publications also not that long ago.

Oh really ... hm, that does make it a much bigger deal than I was
thinking.  Given that, I don't think there's any huge objection to
attaching this to CREATE, at least till we get around to a more
significant redesign.

			regards, tom lane





view thread (61+ messages)  latest in thread

Message-ID: <29811.1580250900@sss.pgh.pa.us>
Permalink:  ../29811.1580250900@sss.pgh.pa.us/
Also on:    postgresql.org/message-id/29811.1580250900@sss.pgh.pa.us

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-hackers@postgresql.org
  Cc: tgl@sss.pgh.pa.us, sfrost@snowman.net, peter.eisentraut@2ndquadrant.com, pgsql-hackers@lists.postgresql.org, robertmhaas@gmail.com
  Subject: Re: Removing pg_pltemplate and creating "trustable" extensions
  In-Reply-To: <29811.1580250900@sss.pgh.pa.us>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox