On Tuesday 26 February 2008 12:20, Andrew Dunstan wrote:
> Robert Treat wrote:
> > There are a lot of people who have a database provider of some sort who
> > creates a database for them, giving them ownership of that specific
> > database, with pg_hba.conf specifying connection only to that db. They
> > are then free to muck about that database, installing anything they want,
> > but they cannot load any procedural languages since they only have
> > non-superuser accounts.  (This does give them access to plsql, but not
> > plpgsql).
>
> This is no longer true. Please read the whole thread.
>

Interesting, seems pghackers dropped me from the list, so I missed several 
messages in the thread.  While wrangling with majordomo, I had time to 
reflect that we're still causing issues for setups where you aren't db owner, 
though I dont know what the breakdown is for these types of setups. (Although 
since many 3rd party apps try to run as unprivileged users, I'm sure it's 
more of a pain than people think) 

*shrug*

-- 
Robert Treat
Build A Brighter LAMP :: Linux Apache {middleware} PostgreSQL

---------------------------(end of broadcast)---------------------------
TIP 2: Don't 'kill -9' the postmaster

Reply via email to