]> granicus.if.org Git - postgresql/commit
Document that CREATE OPERATOR CLASS amounts to granting public execute
authorTom Lane <tgl@sss.pgh.pa.us>
Fri, 13 Jan 2006 18:10:25 +0000 (18:10 +0000)
committerTom Lane <tgl@sss.pgh.pa.us>
Fri, 13 Jan 2006 18:10:25 +0000 (18:10 +0000)
commit7d6d02b640395bb2f43c01a134d92ff080e82b34
treee4bf9dab7b9e32acc1afa63439f3402c7823e77a
parent1564e92cea27a22ace7da635fe73fc23f96f8d4e
Document that CREATE OPERATOR CLASS amounts to granting public execute
permissions on the functions and operators contained in the opclass.
Since we already require superuser privilege to create an operator class,
there's no expansion-of-privilege hazard here, but if someone were to get
the idea of building an opclass containing functions that need security
restrictions, we'd better warn them off.  Also, change the permission
checks from have-execute-privilege to have-ownership, and then comment
them all out since they're dead code anyway under the superuser restriction.
doc/src/sgml/ref/create_opclass.sgml
src/backend/commands/opclasscmds.c