Kohei KaiGai <kai...@kaigai.gr.jp> writes: > The current implementation set the current user as owner of the new schema. > The default permission check of schema allows owner to create several kinds > of underlying objects. > > In the result, we may consider a scenario that a user without permissions to > create new objects possibly get a schema created by CREATE EXTENSION > that allows him to create new objects (such as table, function, ...). > > I don't think it is a desirable behavior. :-(
Agreed, -- Dimitri Fontaine http://2ndQuadrant.fr PostgreSQL : Expertise, Formation et Support -- Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers