Re: Inheritance is a security loophole!
От | Bruce Momjian |
---|---|
Тема | Re: Inheritance is a security loophole! |
Дата | |
Msg-id | 200012222001.PAA01595@candle.pha.pa.us обсуждение исходный текст |
Ответ на | Inheritance is a security loophole! (Tom Lane <tgl@sss.pgh.pa.us>) |
Список | pgsql-hackers |
> I suppose a proper fix would involve adding a new permission type "can > make child tables", but I don't want to mess with that at the moment. > For 7.1, I propose that we only allow creation of child tables to the > owner of the parent table. I see no reason people would be inheriting from other people's tables. Let's disable it. > PS: another interesting problem: create a temp table, then create a > non-temp table that inherits from it. Unhappiness ensues when you > end your session. Need to prohibit this combination, I think. Clear example where mixing features causes strange behavour. Part of the UNION/TEMPORARY/subquery/aggregate/inheritance/rule/view/array mix. -- Bruce Momjian | http://candle.pha.pa.us pgman@candle.pha.pa.us | (610) 853-3000+ If your life is a hard drive, | 830 Blythe Avenue + Christ can be your backup. | Drexel Hill, Pennsylvania19026
В списке pgsql-hackers по дате отправления: