mirror of
https://github.com/postgres/postgres.git
synced 2025-07-05 07:21:24 +03:00
Reserve the "pg_" namespace for roles
This will prevent users from creating roles which begin with "pg_" and will check for those roles before allowing an upgrade using pg_upgrade. This will allow for default roles to be provided at initdb time. Reviews by José Luis Tallón and Robert Haas
This commit is contained in:
@ -854,6 +854,9 @@ check_role(char **newval, void **extra, GucSource source)
|
||||
roleid = InvalidOid;
|
||||
is_superuser = false;
|
||||
}
|
||||
/* Do not allow setting role to a reserved role. */
|
||||
else if (strncmp(*newval, "pg_", 3) == 0)
|
||||
return false;
|
||||
else
|
||||
{
|
||||
if (!IsTransactionState())
|
||||
|
Reference in New Issue
Block a user