Stephen Frost 0fdc8495bf Add default roles for file/program access ...

This patch adds new default roles named 'pg_read_server_files',
'pg_write_server_files', 'pg_execute_server_program' which
allow an administrator to GRANT to a non-superuser role the ability to
access server-side files or run programs through PostgreSQL (as the user
the database is running as).  Having one of these roles allows a
non-superuser to use server-side COPY to read, write, or with a program,
and to use file_fdw (if installed by a superuser and GRANT'd USAGE on
it) to read from files or run a program.

The existing misc file functions are also changed to allow a user with
the 'pg_read_server_files' default role to read any files on the
filesystem, matching the privileges given to that role through COPY and
file_fdw from above.

Reviewed-By: Michael Paquier
Discussion: https://postgr.es/m/20171231191939.GR2416%40tamriel.snowman.net

2018-04-06 14:47:10 -04:00

..

abort.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

allfiles.sgml

Allow on-line enabling and disabling of data checksums

2018-04-05 22:04:48 +02:00

alter_aggregate.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_collation.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_conversion.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_database.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_default_privileges.sgml

SQL procedures

2017-11-30 11:03:20 -05:00

alter_domain.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_event_trigger.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_extension.sgml

SQL procedures

2017-11-30 11:03:20 -05:00

alter_foreign_data_wrapper.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_foreign_table.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_function.sgml

SQL procedures

2017-11-30 11:03:20 -05:00

alter_group.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_index.sgml

Local partitioned indexes

2018-01-19 11:49:22 -03:00

alter_language.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_large_object.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_materialized_view.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_opclass.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_operator.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_opfamily.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_policy.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_procedure.sgml

SQL procedures

2017-11-30 11:03:20 -05:00

alter_publication.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_role.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_routine.sgml

SQL procedures

2017-11-30 11:03:20 -05:00

alter_rule.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_schema.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_sequence.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_server.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_statistics.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_subscription.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_system.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_table.sgml

Foreign keys on partitioned tables

2018-04-04 14:02:49 -03:00

alter_tablespace.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_trigger.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_tsconfig.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_tsdictionary.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_tsparser.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_tstemplate.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_type.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_user_mapping.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_user.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

alter_view.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

analyze.sgml

Add parenthesized options syntax for ANALYZE.

2018-03-05 16:21:05 -08:00

begin.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

call.sgml

Support INOUT arguments in procedures

2018-03-14 12:07:28 -04:00

checkpoint.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

close.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

cluster.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

clusterdb.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

comment.sgml

SQL procedures

2017-11-30 11:03:20 -05:00

commit_prepared.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

commit.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

copy.sgml

Add default roles for file/program access

2018-04-06 14:47:10 -04:00

create_access_method.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_aggregate.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_cast.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_collation.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_conversion.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_database.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_domain.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_event_trigger.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_extension.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_foreign_data_wrapper.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_foreign_table.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_function.sgml

Remove the obsolete WITH clause of CREATE FUNCTION.

2018-01-26 12:25:44 -05:00

create_group.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_index.sgml

Fix misprint in documentation

2018-04-05 13:06:05 +03:00

create_language.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_materialized_view.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_opclass.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_operator.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_opfamily.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_policy.sgml

MERGE SQL Command following SQL:2016

2018-04-03 09:28:16 +01:00

create_procedure.sgml

Support INOUT arguments in procedures

2018-03-14 12:07:28 -04:00

create_publication.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_role.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_rule.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_schema.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_sequence.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_server.sgml

docs: fix spacing around "if not exists" brackets

2018-03-29 21:25:39 -04:00

create_statistics.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_subscription.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_table_as.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_table.sgml

Foreign keys on partitioned tables

2018-04-04 14:02:49 -03:00

create_tablespace.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_transform.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_trigger.sgml

Allow FOR EACH ROW triggers on partitioned tables

2018-03-23 10:48:22 -03:00

create_tsconfig.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_tsdictionary.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_tsparser.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_tstemplate.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_type.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_user_mapping.sgml

docs: fix spacing around "if not exists" brackets

2018-03-29 21:25:39 -04:00

create_user.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

create_view.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

createdb.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

createuser.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

deallocate.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

declare.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

delete.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

discard.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

do.sgml

Transaction control in PL procedures

2018-01-22 08:43:06 -05:00

drop_access_method.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_aggregate.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_cast.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_collation.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_conversion.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_database.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_domain.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_event_trigger.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_extension.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_foreign_data_wrapper.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_foreign_table.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_function.sgml

SQL procedures

2017-11-30 11:03:20 -05:00

drop_group.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_index.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_language.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_materialized_view.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_opclass.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_operator.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_opfamily.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_owned.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_policy.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_procedure.sgml

SQL procedures

2017-11-30 11:03:20 -05:00

drop_publication.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_role.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_routine.sgml

SQL procedures

2017-11-30 11:03:20 -05:00

drop_rule.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_schema.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_sequence.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_server.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_statistics.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_subscription.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_table.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_tablespace.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_transform.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_trigger.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_tsconfig.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_tsdictionary.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_tsparser.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_tstemplate.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_type.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_user_mapping.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_user.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

drop_view.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

dropdb.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

dropuser.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

ecpg-ref.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

end.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

execute.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

explain.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

fetch.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

grant.sgml

SQL procedures

2017-11-30 11:03:20 -05:00

import_foreign_schema.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

initdb.sgml

Allow on-line enabling and disabling of data checksums

2018-04-05 22:04:48 +02:00

insert.sgml

MERGE SQL Command following SQL:2016

2018-04-03 09:28:16 +01:00

listen.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

load.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

lock.sgml

Allow to lock views.

2018-03-30 09:18:02 +09:00

merge.sgml

MERGE syntax diagram correction

2018-04-05 20:36:23 +01:00

move.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

notify.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

pg_basebackup.sgml

Validate page level checksums in base backups

2018-04-03 13:47:16 +02:00

pg_config-ref.sgml

Don't use SGML empty tags

2017-10-17 15:10:33 -04:00

pg_controldata.sgml

Add long options to pg_resetwal and pg_controldata

2018-03-24 21:49:53 -04:00

pg_ctl-ref.sgml

Documentation fix: pg_ctl no longer makes connection attempts.

2018-01-23 12:42:03 -05:00

pg_dump.sgml

Support --no-comments in pg_dump, pg_dumpall, pg_restore.

2018-01-25 15:27:24 -05:00

pg_dumpall.sgml

Support --no-comments in pg_dump, pg_dumpall, pg_restore.

2018-01-25 15:27:24 -05:00

pg_isready.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

pg_receivewal.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

pg_recvlogical.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

pg_resetwal.sgml

pg_resetwal: Allow users to change the WAL segment size

2018-03-25 14:58:49 -04:00

pg_restore.sgml

Support --no-comments in pg_dump, pg_dumpall, pg_restore.

2018-01-25 15:27:24 -05:00

pg_rewind.sgml

Make pg_rewind skip files and directories that are removed during server start.

2018-03-29 04:56:52 +09:00

pg_verify_checksums.sgml

Allow on-line enabling and disabling of data checksums

2018-04-05 22:04:48 +02:00

pg_waldump.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

pgarchivecleanup.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

pgbench.sgml

Set random seed for pgbench.

2018-03-26 18:26:27 +03:00

pgtestfsync.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

pgtesttiming.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

pgupgrade.sgml

doc: clarify major/minor pg_upgrade versions with examples

2018-01-31 17:09:59 -05:00

postgres-ref.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

postmaster.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

prepare_transaction.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

prepare.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

psql-ref.sgml

Add \if support to pgbench

2018-03-22 17:42:03 +03:00

reassign_owned.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

refresh_materialized_view.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

reindex.sgml

Local partitioned indexes

2018-01-19 11:49:22 -03:00

reindexdb.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

release_savepoint.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

reset.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

revoke.sgml

SQL procedures

2017-11-30 11:03:20 -05:00

rollback_prepared.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

rollback_to.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

rollback.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

savepoint.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

security_label.sgml

SQL procedures

2017-11-30 11:03:20 -05:00

select_into.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

select.sgml

Support all SQL:2011 options for window frame clauses.

2018-02-07 00:06:56 -05:00

set_constraints.sgml

Convert SGML IDs to lower case

2017-10-20 19:26:10 -04:00

set_role.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

set_session_auth.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

set_transaction.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

set.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

show.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

start_transaction.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

truncate.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

unlisten.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

update.sgml

Allow UPDATE to move rows between partitions.

2018-01-19 15:33:06 -05:00

vacuum.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

vacuumdb.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00

values.sgml

Convert documentation to DocBook XML

2017-11-23 09:44:28 -05:00