Lamar Owen wrote:
> On Tuesday 30 July 2002 11:51 pm, Tom Lane wrote:
> > Lamar Owen <[EMAIL PROTECTED]> writes:
> > >> CREATE DATABASE foo WITH LOCATION = 'BAR'
> > > And requires you to be a database superuser anyway.
> 
> > CREATE DATABASE does not require superuser privs, only createdb
> > which is not usually considered particular dangerous.
> 
> Pardon my misspeak, as there are those two components to the privs.  My error. 
> Typically normal users aren't given create database privileges -- at least on 
> my systems.
> 
> And, again, I'm completely for the idea of this being in postgresql.conf.  But 
> I'm not convinced that the security angle is a valid reason.  The consistency 
> reason is enough alone to warrant it being that way.

Agreed.  Consistency argues for the postgresql.conf solution, not
security.  Also, I would like to see initlocation removed as soon as we
get a 100% functional replacement.  We have fielded too many questions
about how to set it up.

-- 
  Bruce Momjian                        |  http://candle.pha.pa.us
  [EMAIL PROTECTED]               |  (610) 853-3000
  +  If your life is a hard drive,     |  830 Blythe Avenue
  +  Christ can be your backup.        |  Drexel Hill, Pennsylvania 19026

---------------------------(end of broadcast)---------------------------
TIP 2: you can get off all lists at once with the unregister command
    (send "unregister YourEmailAddressHere" to [EMAIL PROTECTED])

Reply via email to