diff options
| author | Tom Lane <tgl@sss.pgh.pa.us> | 2017-11-14 12:33:10 -0500 |
|---|---|---|
| committer | Tom Lane <tgl@sss.pgh.pa.us> | 2017-11-14 12:33:10 -0500 |
| commit | 6d776522d243d38faca6924d9b3c7cfaf0c4860d (patch) | |
| tree | 438609f77164d191fea3011e9a0301fc489f348d /src/backend/executor/nodeModifyTable.c | |
| parent | a61f5ab986386628cf20b33971364475ce452412 (diff) | |
| download | postgresql-6d776522d243d38faca6924d9b3c7cfaf0c4860d.tar.gz postgresql-6d776522d243d38faca6924d9b3c7cfaf0c4860d.zip | |
Document changes in large-object privilege checking.
Commit 5ecc0d738 removed the hard-wired superuser checks in lo_import
and lo_export in favor of protecting them with SQL permissions, but
failed to adjust the documentation to match. Fix that, and add a
<caution> paragraph pointing out the nontrivial security hazards
involved with actually granting such permissions. (It's still better
than ALLOW_DANGEROUS_LO_FUNCTIONS, though.)
Also, commit ae20b23a9 caused large object read/write privilege to
be checked during lo_open() rather than in the actual read or write
calls. Document that.
Discussion: https://postgr.es/m/CAB7nPqRHmNOYbETnc_2EjsuzSM00Z+BWKv9sy6tnvSd5gWT_JA@mail.gmail.com
Diffstat (limited to 'src/backend/executor/nodeModifyTable.c')
0 files changed, 0 insertions, 0 deletions