Mark some contrib modules as "trusted".
authorTom Lane <tgl@sss.pgh.pa.us>
Thu, 13 Feb 2020 20:02:35 +0000 (15:02 -0500)
committerTom Lane <tgl@sss.pgh.pa.us>
Thu, 13 Feb 2020 20:02:35 +0000 (15:02 -0500)
commiteb67623c965b4759a96309cdb58a17339fc5d401
tree5601f3073155b20bf7a419b85257e16383a3c8a8
parent7fdd919ae7550f478e7ae4031f7f439278cf2282
Mark some contrib modules as "trusted".

This allows these modules to be installed into a database without
superuser privileges (assuming that the DBA or sysadmin has installed
the module's files in the expected place).  You only need CREATE
privilege on the current database, which by default would be
available to the database owner.

The following modules are marked trusted:

btree_gin
btree_gist
citext
cube
dict_int
earthdistance
fuzzystrmatch
hstore
hstore_plperl
intarray
isn
jsonb_plperl
lo
ltree
pg_trgm
pgcrypto
seg
tablefunc
tcn
tsm_system_rows
tsm_system_time
unaccent
uuid-ossp

In the future we might mark some more modules trusted, but there
seems to be no debate about these, and on the whole it seems wise
to be conservative with use of this feature to start out with.

Discussion: https://postgr.es/m/32315.1580326876@sss.pgh.pa.us
46 files changed:
contrib/btree_gin/btree_gin.control
contrib/btree_gist/btree_gist.control
contrib/citext/citext.control
contrib/cube/cube.control
contrib/dict_int/dict_int.control
contrib/earthdistance/earthdistance.control
contrib/fuzzystrmatch/fuzzystrmatch.control
contrib/hstore/hstore.control
contrib/hstore_plperl/hstore_plperl.control
contrib/intarray/intarray.control
contrib/isn/isn.control
contrib/jsonb_plperl/jsonb_plperl.control
contrib/lo/lo.control
contrib/ltree/ltree.control
contrib/pg_trgm/pg_trgm.control
contrib/pgcrypto/pgcrypto.control
contrib/seg/seg.control
contrib/tablefunc/tablefunc.control
contrib/tcn/tcn.control
contrib/tsm_system_rows/tsm_system_rows.control
contrib/tsm_system_time/tsm_system_time.control
contrib/unaccent/unaccent.control
contrib/uuid-ossp/uuid-ossp.control
doc/src/sgml/btree-gin.sgml
doc/src/sgml/btree-gist.sgml
doc/src/sgml/citext.sgml
doc/src/sgml/contrib.sgml
doc/src/sgml/cube.sgml
doc/src/sgml/dict-int.sgml
doc/src/sgml/earthdistance.sgml
doc/src/sgml/fuzzystrmatch.sgml
doc/src/sgml/hstore.sgml
doc/src/sgml/intarray.sgml
doc/src/sgml/isn.sgml
doc/src/sgml/json.sgml
doc/src/sgml/lo.sgml
doc/src/sgml/ltree.sgml
doc/src/sgml/pgcrypto.sgml
doc/src/sgml/pgtrgm.sgml
doc/src/sgml/seg.sgml
doc/src/sgml/tablefunc.sgml
doc/src/sgml/tcn.sgml
doc/src/sgml/tsm-system-rows.sgml
doc/src/sgml/tsm-system-time.sgml
doc/src/sgml/unaccent.sgml
doc/src/sgml/uuid-ossp.sgml