Horton

Re: public schema default ACL

Peter Eisentraut <peter.eisentraut@enterprisedb.com>

View thread View on postgr.es
From: Peter Eisentraut <peter.eisentraut@enterprisedb.com>
To: Noah Misch <noah@leadboat.com>
Cc: "pgsql-hackers@postgresql.org" <pgsql-hackers@postgresql.org>, Laurenz Albe <laurenz.albe@cybertec.at>, Stephen Frost <sfrost@snowman.net>, Magnus Hagander <magnus@hagander.net>, "David G. Johnston" <david.g.johnston@gmail.com>, Alvaro Herrera <alvherre@alvh.no-ip.org>, Tom Lane <tgl@sss.pgh.pa.us>, Robert Haas <robertmhaas@gmail.com>
Date: 2021-09-08T09:45:15Z
Lists: pgsql-hackers 
On 04.09.21 18:18, Noah Misch wrote:
>> I tried a couple of upgrade scenarios and it appeared to do the right thing.
>>
>> This patch is actually two separate changes: First, change the owner of the
>> public schema to "pg_database_owner"; second, change the default privileges
>> set on the public schema by initdb.  I was a bit surprised that the former
>> hadn't already be done in PG14.
> 
> Interesting.  That change requires a7a7be1, which is also not in v14.
> 
> Do you plan to change the CF entry, or should it remain in Needs Review with
> no assigned reviewer?

I've set it to ready for committer now.

Commits

  1. Revoke PUBLIC CREATE from public schema, now owned by pg_database_owner.

  2. Document security implications of search_path and the public schema.