agora inbox for pljava-dev@postgresql.org  

help / color / mirror / Atom feed

[Pljava-dev] Re: PL Java Security (sqlj / owner postgres)
2+ messages / 0 participants
[nested] [flat]

* [Pljava-dev] Re: PL Java Security (sqlj / owner postgres)
@ 2005-02-06 16:18 
  2005-02-06 18:34 ` [Pljava-dev] Re: PL Java Security (sqlj / owner postgres) 
  0 siblings, 1 reply; 2+ messages in thread

From:  @ 2005-02-06 16:18 UTC (permalink / raw)


<BR>> Filip,
<BR>> > SQLJ Schema security:
<BR>> > -----------------------------------
<BR>> > The SQLJ schema is authorized to user
postgres.
<BR>> >
<BR>> Why? In my installation, I don\'t have a
postgres user. Is \"postgres\" a
<BR>> non-superuser in your setup?
<BR>
<BR>Yes, you are right. There is no reason to have
a \"postgres\" user. I am just used to have it as
a default (and the only) superuser.
<BR>
<BR>I wrote the \"checkIfConnectedAsSuperuser\"
method in the source (I can see it already in CVS
:-), this check should be sufficient. The SQLJ
schema and its object can be owned by another
supersuser who is deploying pl/Java, not only by
the default \"postgres\" user. The only important
thing is that the SQLJ objects owner has the
superuser flag \"on\".
<BR>
<BR>Regards, Filip
<BR>
<BR>> 
<BR>> Regards,
<BR>> Thomas Hallgren

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.pgfoundry.org/pipermail/pljava-dev/attachments/20050206/44358107/attachment.html;



^ permalink  raw  reply  [nested|flat] 2+ messages in thread

* [Pljava-dev] Re: PL Java Security (sqlj / owner postgres)
  2005-02-06 16:18 [Pljava-dev] Re: PL Java Security (sqlj / owner postgres) 
@ 2005-02-06 18:34 ` 
  0 siblings, 0 replies; 2+ messages in thread

From:  @ 2005-02-06 18:34 UTC (permalink / raw)

Ing. Filip Hrbek wrote:

>
> > Filip,
> > > SQLJ Schema security:
> > > -----------------------------------
> > > The SQLJ schema is authorized to user postgres.
> > >
> > Why? In my installation, I don\'t have a postgres user. Is 
> \"postgres\" a
> > non-superuser in your setup?
>
> Yes, you are right. There is no reason to have a \"postgres\" user. I 
> am just used to have it as a default (and the only) superuser.
>
> I wrote the \"checkIfConnectedAsSuperuser\" method in the source (I 
> can see it already in CVS :-), this check should be sufficient. The 
> SQLJ schema and its object can be owned by another supersuser who is 
> deploying pl/Java, not only by the default \"postgres\" user. The only 
> important thing is that the SQLJ objects owner has the superuser flag 
> \"on\".

Ok, great. I removed the use of "postgres" user. I also added so that 
only user that have CREATE permissions on a schema can do set_classpath 
on that schema. I added a note about security inthe userguide.html.

- thomas






^ permalink  raw  reply  [nested|flat] 2+ messages in thread

end of thread, other threads:[~2005-02-06 18:34 UTC | newest]

Thread overview: 2+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2005-02-06 16:18 [Pljava-dev] Re: PL Java Security (sqlj / owner postgres) 
2005-02-06 18:34 ` 

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox