Thread

1. security problem ?

   Max Vaschenko <max@nino.ru> — 2000-04-28T07:00:25Z

   Hi.
   
   Using postgres 6.5.3-1 i meet a feature:
   any (authenticated) user can create table in any
   database and it does not matter who is owner of database.
   But (and it's right) he can't access existing tables if ones
   was not 'granted'.
   
   ------------
   Max Vashenko
   Nizhny Novgorod
   Information Networks
   
   

2. Re: security problem ?

   Peter Eisentraut <e99re41@docs.uu.se> — 2000-04-28T10:27:23Z

   On Fri, 28 Apr 2000, Vashenko Maxim wrote:
   
   > Using postgres 6.5.3-1 i meet a feature: any (authenticated) user can
   > create table in any database and it does not matter who is owner of
   > database.
   
   You could call that a design deficiency. I hope to do something about that
   for 7.1 but for now you're stuck with it.
   
   -- 
   Peter Eisentraut                  Sernanders väg 10:115
   peter_e@gmx.net                   75262 Uppsala
   http://yi.org/peter-e/            Sweden