Thread

1. Re: [PORTS] Port Bug Report: Grant select to other user removes owner select permission

   Bruce Momjian <maillist@candle.pha.pa.us> — 1998-03-16T05:45:31Z

   Does anyone want to comment on this?
   
   > 
   > 
   > ============================================================================
   >                         POSTGRESQL BUG REPORT TEMPLATE
   > ============================================================================
   > 
   > 
   > Your name		: Adam Levine
   > Your email address	: jarreth1@airmail.net
   > 
   > Category		: runtime: back-end
   > Severity		: non-critical
   > 
   > Summary: Grant select to other user removes owner select permission
   > 
   > System Configuration
   > --------------------
   >   Operating System   : Linux 2.0.33 Elf Slackware
   > 
   >   PostgreSQL version : 6.3
   > 
   >   Compiler used      : gcc 2.7.2
   > 
   > Hardware:
   > ---------
   > 486 PCI, 64M ram
   > 
   > Versions of other tools:
   > ------------------------
   > gmake 3.74
   > 
   > --------------------------------------------------------------------------
   > 
   > Problem Description:
   > --------------------
   > If a user creates a table, and then grants select privs to another user, the owner of the table can no longer select withouth first granting himself select privs.
   > No other permissions testing was done, fyi.
   > 
   > --------------------------------------------------------------------------
   > 
   > Test Case:
   > ----------
   > user1 (in their database) creates table1; user1 selects from table1 (success); user2 selects from table1 (failure); user1 grants select on table1 to user2; user2 selects from table1 (success); user1 selects from table1 (failure);
   > user1 grants select on table1 to user1; user1 selects from table1 (success);
   > 
   > --------------------------------------------------------------------------
   > 
   > Solution:
   > ---------
   > 
   > 
   > --------------------------------------------------------------------------
   > 
   > 
   > 
   
   
   -- 
   Bruce Momjian                          |  830 Blythe Avenue
   maillist@candle.pha.pa.us              |  Drexel Hill, Pennsylvania 19026
     +  If your life is a hard drive,     |  (610) 353-9879(w)
     +  Christ can be your backup.        |  (610) 853-3000(h)
   
   

2. Re: [HACKERS] Re: [PORTS] Port Bug Report: Grant select to other user removes owner select permission

   Marc G. Fournier <scrappy@hub.org> — 1998-03-16T13:15:58Z

   On Mon, 16 Mar 1998, Bruce Momjian wrote:
   
   > Does anyone want to comment on this?
   
   	Its a bug <- short, Bruce-like comment *grin*
   
   
   > 
   > > 
   > > 
   > > ============================================================================
   > >                         POSTGRESQL BUG REPORT TEMPLATE
   > > ============================================================================
   > > 
   > > 
   > > Your name		: Adam Levine
   > > Your email address	: jarreth1@airmail.net
   > > 
   > > Category		: runtime: back-end
   > > Severity		: non-critical
   > > 
   > > Summary: Grant select to other user removes owner select permission
   > > 
   > > System Configuration
   > > --------------------
   > >   Operating System   : Linux 2.0.33 Elf Slackware
   > > 
   > >   PostgreSQL version : 6.3
   > > 
   > >   Compiler used      : gcc 2.7.2
   > > 
   > > Hardware:
   > > ---------
   > > 486 PCI, 64M ram
   > > 
   > > Versions of other tools:
   > > ------------------------
   > > gmake 3.74
   > > 
   > > --------------------------------------------------------------------------
   > > 
   > > Problem Description:
   > > --------------------
   > > If a user creates a table, and then grants select privs to another user, the owner of the table can no longer select withouth first granting himself select privs.
   > > No other permissions testing was done, fyi.
   > > 
   > > --------------------------------------------------------------------------
   > > 
   > > Test Case:
   > > ----------
   > > user1 (in their database) creates table1; user1 selects from table1 (success); user2 selects from table1 (failure); user1 grants select on table1 to user2; user2 selects from table1 (success); user1 selects from table1 (failure);
   > > user1 grants select on table1 to user1; user1 selects from table1 (success);
   > > 
   > > --------------------------------------------------------------------------
   > > 
   > > Solution:
   > > ---------
   > > 
   > > 
   > > --------------------------------------------------------------------------
   > > 
   > > 
   > > 
   > 
   > 
   > -- 
   > Bruce Momjian                          |  830 Blythe Avenue
   > maillist@candle.pha.pa.us              |  Drexel Hill, Pennsylvania 19026
   >   +  If your life is a hard drive,     |  (610) 353-9879(w)
   >   +  Christ can be your backup.        |  (610) 853-3000(h)
   >