database/postgres
1
0
Fork 0
mirror of https://github.com/postgres/postgres.git synced 2025-10-28 11:55:03 +03:00
Code Activity

Disallow LOAD to non-superusers. Per report from John Heasman.

Browse Source
This commit is contained in:
Tom Lane
2005-01-24 17:46:49 +00:00
parent 48a1dc0d5c
commit a23133a4d7
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/backend/tcop/utility.c
View File

@@ -10,7 +10,7 @@
*
*
* IDENTIFICATION
* $Header: /cvsroot/pgsql/src/backend/tcop/utility.c,v 1.180 2002/10/21 20:31:52 momjian Exp $
* $Header: /cvsroot/pgsql/src/backend/tcop/utility.c,v 1.180.2.1 2005/01/24 17:46:49 tgl Exp $
*
*-------------------------------------------------------------------------
*/
@@ -694,6 +694,8 @@ ProcessUtility(Node *parsetree,
{
LoadStmt *stmt = (LoadStmt *) parsetree;
if (!superuser())
elog(ERROR, "permission denied");
closeAllVfds(); /* probably not necessary... */
load_file(stmt->filename);
}