On Fri, Dec 21, 2012 at 4:02 AM, <yan...@cn.fujitsu.com> wrote: > The following bug has been logged on the website: > > Bug reference: 7767 > Logged by: yangyd > Email address: yan...@cn.fujitsu.com > PostgreSQL version: 9.2.2 > Operating system: Windows 7 Professional > Description: > > I found that it's possible to start the postgres process as the > administrator of the system using `pg_ctl start -D data`, while `postgres -D > data` will complain "Execution of PostgreSQL by a user with administrative > permissions is not > permitted." > > I confirmed with Process Explorer that the postgres process created by > pg_ctl does running under the administrator account. > > Is this behavior intended?
It's supposed to still run under the administrative account, however, pg_ctl will create what's called a restricted token and execute it as that - so it will run as Administrator but without access to any permissions received by being in the Administrators or Power Users group for example. You can verify it by for example attempting to COPY to a file that only administrators have access to (access must be granted through the group, of course) -- Magnus Hagander Me: http://www.hagander.net/ Work: http://www.redpill-linpro.com/ -- Sent via pgsql-bugs mailing list (pgsql-bugs@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-bugs
