Re: [GENERAL] permission denied to create extension ltree Must be superuser to create this extension.
Ok, but can someone comment, document something on security of installing extensions for normal users? Does allowing access to extension provides a way to circumvent security model? If not why can't it be allowed for user installations (provided that extension was previously allowed in some conf file)? -- Sent via pgsql-general mailing list (pgsql-general@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-general
Re: [GENERAL] permission denied to create extension ltree Must be superuser to create this extension.
On Wed, Mar 14, 2012 at 9:28 PM, krz...@gmail.com krz...@gmail.com wrote: Ok, but can someone comment, document something on security of installing extensions for normal users? Does allowing access to extension provides a way to circumvent security model? If not why can't it be allowed for user installations (provided that extension was previously allowed in some conf file)? -- Sent via pgsql-general mailing list (pgsql-general@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-general Extensions can be written in C, to me that seems like enough reason... -- Sent via pgsql-general mailing list (pgsql-general@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-general
Re: [GENERAL] permission denied to create extension ltree Must be superuser to create this extension.
On Sat, Mar 10, 2012 at 7:57 AM, krz...@gmail.com krz...@gmail.com wrote: Why does ltree require superuser privledge? Is it dangerous and allow CREATE EXTENSION must be run by superusers only. circumventing server security? No mention of this in manual so it is There is a mention here http://www.postgresql.org/docs/9.1/static/contrib.html either documentation problem or a too strict check problem. Which one is that? -- Sent via pgsql-general mailing list (pgsql-general@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-general -- Sergey Konoplev Blog: http://gray-hemp.blogspot.com LinkedIn: http://ru.linkedin.com/in/grayhemp JID/GTalk: gray...@gmail.com Skype: gray-hemp -- Sent via pgsql-general mailing list (pgsql-general@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-general
[GENERAL] permission denied to create extension ltree Must be superuser to create this extension.
psql (9.1.2) CREATE EXTENSION ltree; ERROR: permission denied to create extension ltree HINT: Must be superuser to create this extension. Why does ltree require superuser privledge? Is it dangerous and allow circumventing server security? No mention of this in manual so it is either documentation problem or a too strict check problem. Which one is that? -- Sent via pgsql-general mailing list (pgsql-general@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-general