Received: from malur.postgresql.org ([217.196.149.56])
	by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256)
	(Exim 4.89)
	(envelope-from <pgsql-hackers-owner+archive@lists.postgresql.org>)
	id 1iwZRx-0000le-5J
	for pgsql-hackers@arkaria.postgresql.org; Tue, 28 Jan 2020 22:35:13 +0000
Received: from localhost ([127.0.0.1] helo=malur.postgresql.org)
	by malur.postgresql.org with esmtp (Exim 4.89)
	(envelope-from <pgsql-hackers-owner+archive@lists.postgresql.org>)
	id 1iwZRu-00033v-2Q
	for pgsql-hackers@arkaria.postgresql.org; Tue, 28 Jan 2020 22:35:10 +0000
Received: from makus.postgresql.org ([2001:4800:3e1:1::229])
	by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256)
	(Exim 4.89)
	(envelope-from <tgl@sss.pgh.pa.us>)
	id 1iwZRt-00033o-MN
	for pgsql-hackers@lists.postgresql.org; Tue, 28 Jan 2020 22:35:09 +0000
Received: from sss.pgh.pa.us ([66.207.139.130])
	by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <tgl@sss.pgh.pa.us>)
	id 1iwZRm-000560-W1
	for pgsql-hackers@lists.postgresql.org; Tue, 28 Jan 2020 22:35:08 +0000
Received: from sss1.sss.pgh.pa.us (localhost [127.0.0.1])
	by sss.pgh.pa.us (8.14.4/8.14.4) with ESMTP id 00SMZ0lA029812;
	Tue, 28 Jan 2020 17:35:00 -0500
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Stephen Frost <sfrost@snowman.net>
cc: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>,
        PostgreSQL Hackers <pgsql-hackers@lists.postgresql.org>,
        Robert Haas <robertmhaas@gmail.com>
Subject: Re: Removing pg_pltemplate and creating "trustable" extensions
In-reply-to: 
 <CAOuzzgqqq4-K1AT_bDzQP8+ukFK+CrFD2B9WN1CY6ZQdUrJxGw@mail.gmail.com>
References: <12039.1578602021@sss.pgh.pa.us>
 <20200110192646.GZ3195@tamriel.snowman.net> <16979.1578685198@sss.pgh.pa.us>
 <CA+TgmoYry3gSXN98s8hVyf8GVzTuqV8WuhCvpxNzMFEOdvx84w@mail.gmail.com>
 <20200110205003.GD3195@tamriel.snowman.net> <27618.1578696790@sss.pgh.pa.us>
 <20200113184019.GF3195@tamriel.snowman.net> <28604.1578947939@sss.pgh.pa.us>
 <20200113205756.GL3195@tamriel.snowman.net> <25342.1579628412@sss.pgh.pa.us>
 <20200128202918.GJ3195@tamriel.snowman.net> <5544.1580244756@sss.pgh.pa.us>
 <CA+Tgmob8d4iaD_nxdmugGbfc=USkm4ZA_NOkY2mK8B6s4oaBMg@mail.gmail.com>
 <23814.1580246216@sss.pgh.pa.us>
 <CAOuzzgqqq4-K1AT_bDzQP8+ukFK+CrFD2B9WN1CY6ZQdUrJxGw@mail.gmail.com>
Comments: In-reply-to Stephen Frost <sfrost@snowman.net>
	message dated "Tue, 28 Jan 2020 16:58:32 -0500"
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-ID: <29810.1580250900.1@sss.pgh.pa.us>
Content-Transfer-Encoding: 8bit
Date: Tue, 28 Jan 2020 17:35:00 -0500
Message-ID: <29811.1580250900@sss.pgh.pa.us>
List-Id: <pgsql-hackers.lists.postgresql.org>
List-Help: <https://lists.postgresql.org/manage/>
List-Subscribe: <https://lists.postgresql.org/manage/>
List-Post: <mailto:pgsql-hackers@lists.postgresql.org>
List-Owner: <mailto:pgsql-hackers-owner@lists.postgresql.org>
List-Archive: <https://www.postgresql.org/list/pgsql-hackers>
Precedence: bulk

Stephen Frost <sfrost@snowman.net> writes:
> On Tue, Jan 28, 2020 at 16:17 Tom Lane <tgl@sss.pgh.pa.us> wrote:
>> On the other hand, there's the point that lots of people have probably
>> given out schema-CREATE privilege to users whom they wouldn't necessarily
>> wish to trust with INSTALL privilege.  Schema-CREATE is a pretty harmless
>> privilege, INSTALL much less so.

> CREATE doesn’t just control the ability to create schemas these days- it
> was extended to cover publications also not that long ago.

Oh really ... hm, that does make it a much bigger deal than I was
thinking.  Given that, I don't think there's any huge objection to
attaching this to CREATE, at least till we get around to a more
significant redesign.

			regards, tom lane