Re: [GENERAL] permission denied to create extension ltree Must be superuser to create this extension.

2012-03-14 Thread krz...@gmail.com
Ok, but can someone comment, document something on security of
installing extensions for normal users? Does allowing access to
extension provides a way to circumvent security model? If not why
can't it be allowed for user installations (provided that extension
was previously allowed in some conf file)?

-- 
Sent via pgsql-general mailing list (pgsql-general@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general


Re: [GENERAL] permission denied to create extension ltree Must be superuser to create this extension.

2012-03-14 Thread Abel Abraham Camarillo Ojeda
On Wed, Mar 14, 2012 at 9:28 PM, krz...@gmail.com krz...@gmail.com wrote:
 Ok, but can someone comment, document something on security of
 installing extensions for normal users? Does allowing access to
 extension provides a way to circumvent security model? If not why
 can't it be allowed for user installations (provided that extension
 was previously allowed in some conf file)?

 --
 Sent via pgsql-general mailing list (pgsql-general@postgresql.org)
 To make changes to your subscription:
 http://www.postgresql.org/mailpref/pgsql-general

Extensions can be written in C, to me that seems like enough reason...

-- 
Sent via pgsql-general mailing list (pgsql-general@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general


Re: [GENERAL] permission denied to create extension ltree Must be superuser to create this extension.

2012-03-11 Thread Sergey Konoplev
On Sat, Mar 10, 2012 at 7:57 AM, krz...@gmail.com krz...@gmail.com wrote:
 Why does ltree require superuser privledge? Is it dangerous and allow

CREATE EXTENSION must be run by superusers only.

 circumventing server security? No mention of this in manual so it is

There is a mention here http://www.postgresql.org/docs/9.1/static/contrib.html

 either documentation problem or a too strict check problem. Which one
 is that?

 --
 Sent via pgsql-general mailing list (pgsql-general@postgresql.org)
 To make changes to your subscription:
 http://www.postgresql.org/mailpref/pgsql-general



-- 
Sergey Konoplev

Blog: http://gray-hemp.blogspot.com
LinkedIn: http://ru.linkedin.com/in/grayhemp
JID/GTalk: gray...@gmail.com Skype: gray-hemp

-- 
Sent via pgsql-general mailing list (pgsql-general@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general


[GENERAL] permission denied to create extension ltree Must be superuser to create this extension.

2012-03-10 Thread krz...@gmail.com
psql (9.1.2)

CREATE EXTENSION ltree;
ERROR:  permission denied to create extension ltree
HINT:  Must be superuser to create this extension.

Why does ltree require superuser privledge? Is it dangerous and allow
circumventing server security? No mention of this in manual so it is
either documentation problem or a too strict check problem. Which one
is that?

-- 
Sent via pgsql-general mailing list (pgsql-general@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general