From: Tom Lane <tgl@sss.pgh.pa.us>
Date: Mon, 24 Jan 2005 17:46:41 +0000 (+0000)
Subject: Disallow LOAD to non-superusers.  Per report from John Heasman.
X-Git-Tag: REL7_4_7~9
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=6508bf52549fb4dc248c757a754b195bd24aa508;p=postgresql

Disallow LOAD to non-superusers.  Per report from John Heasman.
---

diff --git a/src/backend/tcop/utility.c b/src/backend/tcop/utility.c
index 200fc3599b..577da0cbeb 100644
--- a/src/backend/tcop/utility.c
+++ b/src/backend/tcop/utility.c
@@ -10,7 +10,7 @@
  *
  *
  * IDENTIFICATION
- *	  $Header: /cvsroot/pgsql/src/backend/tcop/utility.c,v 1.208 2003/10/02 06:34:04 petere Exp $
+ *	  $Header: /cvsroot/pgsql/src/backend/tcop/utility.c,v 1.208.2.1 2005/01/24 17:46:41 tgl Exp $
  *
  *-------------------------------------------------------------------------
  */
@@ -814,6 +814,10 @@ ProcessUtility(Node *parsetree,
 			{
 				LoadStmt   *stmt = (LoadStmt *) parsetree;
 
+				if (!superuser())
+					ereport(ERROR,
+							(errcode(ERRCODE_INSUFFICIENT_PRIVILEGE),
+							 errmsg("must be superuser to do LOAD")));
 				closeAllVfds(); /* probably not necessary... */
 				load_file(stmt->filename);
 			}