diff options
| author | Tom Lane | 2005-01-24 17:46:58 +0000 |
|---|---|---|
| committer | Tom Lane | 2005-01-24 17:46:58 +0000 |
| commit | ae5b7a0c5b0f7479b40d61a59b8141335d449e87 (patch) | |
| tree | 6eb49f7d96ea8024f3f6165347b5ab967e3a5560 | |
| parent | 66bb44cf63966870af3fc1a6a70f570c18a78faa (diff) | |
Disallow LOAD to non-superusers. Per report from John Heasman.
| -rw-r--r-- | src/backend/tcop/utility.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/backend/tcop/utility.c b/src/backend/tcop/utility.c index c0d2362f767..0547ac26d37 100644 --- a/src/backend/tcop/utility.c +++ b/src/backend/tcop/utility.c @@ -10,7 +10,7 @@ * * * IDENTIFICATION - * $Header: /cvsroot/pgsql/src/backend/tcop/utility.c,v 1.125.2.2 2002/09/30 19:55:08 tgl Exp $ + * $Header: /cvsroot/pgsql/src/backend/tcop/utility.c,v 1.125.2.3 2005/01/24 17:46:58 tgl Exp $ * *------------------------------------------------------------------------- */ @@ -640,6 +640,8 @@ ProcessUtility(Node *parsetree, { LoadStmt *stmt = (LoadStmt *) parsetree; + if (!superuser()) + elog(ERROR, "permission denied"); closeAllVfds(); /* probably not necessary... */ load_file(stmt->filename); } |