Re: How non-superuser can restore database containing procedures

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Richard Huxton <dev(at)archonet(dot)com>
Cc: Andrus <kobruleht2(at)hot(dot)ee>, pgsql-general(at)postgresql(dot)org
Subject: Re: How non-superuser can restore database containing procedures
Date: 2006-12-18 15:47:09
Message-ID: 9049.1166456829@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Richard Huxton <dev(at)archonet(dot)com> writes:
> Andrus wrote:
>> How to allow non-superusres to create database with language ?

> You can't. If they can install a language-handler, they can install code
> that can do anything, including take control of the server and the unix
> account it runs as.

However, you could install the desired languages into template1, or
perhaps better make an extra template database containing them.
Then CREATE DATABASE could copy them into new databases.

regards, tom lane

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Tomi N/A 2006-12-18 16:09:43 Re: permission in the db or in the application?
Previous Message Derrick Stensrud 2006-12-18 15:42:58 pam ldap postgres troubles cannot get postgres to auth via ldap