Re: Bug #549: select table privilege in postgres allows user to create index on the table

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: mshamsi(at)dinmar(dot)com
Cc: pgsql-bugs(at)postgresql(dot)org, pgsql-hackers(at)postgresql(dot)org
Subject: Re: Bug #549: select table privilege in postgres allows user to create index on the table
Date: 2002-01-03 16:54:21
Message-ID: 13279.1010076861@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs pgsql-hackers

pgsql-bugs(at)postgresql(dot)org writes:
> select table privilege in postgres allows user to create index on the table

Actually, it appears that CREATE INDEX has no permission check at all.

I agree this is a bug. Probably CREATE INDEX should require ownership
permission, the same as ALTER TABLE.

regards, tom lane

In response to

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message Tom Lane 2002-01-03 17:22:26 Re: Refcursor problem
Previous Message pgsql-bugs 2002-01-03 16:12:17 Bug #549: select table privilege in postgres allows user to create index on the table

Browse pgsql-hackers by date

  From Date Subject
Next Message Bruce Momjian 2002-01-03 17:08:34 Re: LWLock contention: I think I understand the problem
Previous Message pgsql-bugs 2002-01-03 16:12:05 Bug #549: select table privilege in postgres allows user to create index on the table