Disallow LOAD to non-superusers. Per report from John Heasman.

diff --git a/src/backend/tcop/utility.c b/src/backend/tcop/utility.c
index 1c3ea71d2fe886cf5e73b26db031ab787f3c8fe2..f8b30d8a916ba0fc5ea29222b7d5b8435d684472 100644 (file)
--- a/src/backend/tcop/utility.c
+++ b/src/backend/tcop/utility.c
@@ -10,7 +10,7 @@
  *
  *
  * IDENTIFICATION
- *       $Header: /cvsroot/pgsql/src/backend/tcop/utility.c,v 1.180 2002/10/21 20:31:52 momjian Exp $
+ *       $Header: /cvsroot/pgsql/src/backend/tcop/utility.c,v 1.180.2.1 2005/01/24 17:46:49 tgl Exp $
  *
  *-------------------------------------------------------------------------
  */
@@ -694,6 +694,8 @@ ProcessUtility(Node *parsetree,
                        {
                                LoadStmt   *stmt = (LoadStmt *) parsetree;
 
+                               if (!superuser())
+                                       elog(ERROR, "permission denied");
                                closeAllVfds(); /* probably not necessary... */
                                load_file(stmt->filename);
                        }