rdelaage/postgresql
1
0
Fork 0
mirror of https://git.postgresql.org/git/postgresql.git synced 2024-10-01 17:11:22 +02:00
Code Issues Packages Projects Releases Wiki Activity

CLUSTER did no permissions checking, forsooth ...

Browse Source
This commit is contained in:
Tom Lane 2000-11-08 16:31:06 +00:00
parent e6e893e74f
commit 218f357d82
1 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
src/backend/tcop/utility.c
View File

@ -10,7 +10,7 @@
*
*
* IDENTIFICATION
* $Header: /cvsroot/pgsql/src/backend/tcop/utility.c,v 1.100 2000/11/07 02:17:50 tgl Exp $
* $Header: /cvsroot/pgsql/src/backend/tcop/utility.c,v 1.101 2000/11/08 16:31:06 tgl Exp $
*
*-------------------------------------------------------------------------
*/
@ -670,7 +670,14 @@ ProcessUtility(Node *parsetree,
set_ps_display(commandTag = "CLUSTER");
cluster(stmt->relname, stmt->indexname);
relname = stmt->relname;
if (IsSystemRelationName(relname))
elog(ERROR, "CLUSTER: relation \"%s\" is a system catalog",
relname);
if (!pg_ownercheck(GetUserId(), relname, RELNAME))
elog(ERROR, "permission denied");
cluster(relname, stmt->indexname);
}
break;