Require superuser privilege to create base types (but not composites, enums,

Tom Lane <tgl@sss.pgh.pa.us>

Commit: 7bd7b2002bd018e25d024322c983e856237a50d9
Author: Tom Lane <tgl@sss.pgh.pa.us>
Date: 2008-07-31T16:27:16Z
Releases: 8.4.0
Require superuser privilege to create base types (but not composites, enums,
or domains).  This was already effectively required because you had to own
the I/O functions, and the I/O functions pretty much have to be written in
C since we don't let PL functions take or return cstring.  But given the
possible security consequences of a malicious type definition, it seems
prudent to enforce superuser requirement directly.  Per recent discussion.

Files

PathChange+/−
doc/src/sgml/ref/create_type.sgml modified +10 −4
src/backend/commands/typecmds.c modified +24 −3