Commitad538d8

committed

Disallow LOAD to non-superusers. Per report from John Heasman.

1 parent0ffe9f7 commitad538d8Copy full SHA for ad538d8

File tree

-1

lines changed

-1

lines changed

Lines changed: 5 additions & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -10,7 +10,7 @@`
`10`	`10`	`*`
`11`	`11`	`*`
`12`	`12`	`* IDENTIFICATION`
`13`		`- * $PostgreSQL: pgsql/src/backend/tcop/utility.c,v 1.231 2004/12/31 22:01:16pgsql Exp $`
	`13`	`+ * $PostgreSQL: pgsql/src/backend/tcop/utility.c,v 1.232 2005/01/24 17:46:16tgl Exp $`
`14`	`14`	`*`
`15`	`15`	`*-------------------------------------------------------------------------`
`16`	`16`	`*/`
`@@ -803,6 +803,10 @@ ProcessUtility(Node *parsetree,`
`803`	`803`	`{`
`804`	`804`	`LoadStmtstmt= (LoadStmt)parsetree;`
`805`	`805`
	`806`	`+if (!superuser())`
	`807`	`+ereport(ERROR,`
	`808`	`+(errcode(ERRCODE_INSUFFICIENT_PRIVILEGE),`
	`809`	`+errmsg("must be superuser to do LOAD")));`
`806`	`810`	`closeAllVfds();/* probably not necessary... */`
`807`	`811`	`load_file(stmt->filename);`
`808`	`812`	`}`

Comments

(0)