On Wed, Feb 3, 2010 at 11:43, Alex Hunsaker <[email protected]> wrote: > On Wed, Feb 3, 2010 at 11:28, Tom Lane <[email protected]> wrote: >> Tim Bunce <[email protected]> writes: >>> I do see a need for a GRANT check and I'm adding one now (based on >>> the code in CreateFunction() in functioncmds.c - thanks to RhodiumToad >>> on IRC for the pointer). >> >> What exactly are you proposing to check, and where, and what do you >> think that will fix? > > Non plperl ...
Put another way: HEAD: only people with plperl granted can make functions to manipulate $_SHARED PATCH: anyone can set plperl.plperl_safe_init (but note not plperlu_init as its SUSER) and manipulate $_SHARED Proposed fix: only people with plperl granted can set plperl.plplerl_safe_init and hence restore HEAD behavior -- Sent via pgsql-hackers mailing list ([email protected]) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers
