]> git.ipfire.org Git - thirdparty/postgresql.git/commitdiff
Disallow LOAD to non-superusers. Per report from John Heasman.
authorTom Lane <tgl@sss.pgh.pa.us>
Mon, 24 Jan 2005 17:46:58 +0000 (17:46 +0000)
committerTom Lane <tgl@sss.pgh.pa.us>
Mon, 24 Jan 2005 17:46:58 +0000 (17:46 +0000)
src/backend/tcop/utility.c

index c0d2362f7676ebc178f9e942dfe92b4380ee3fcb..0547ac26d3703e0880d530a687f26503d79449f0 100644 (file)
@@ -10,7 +10,7 @@
  *
  *
  * IDENTIFICATION
- *       $Header: /cvsroot/pgsql/src/backend/tcop/utility.c,v 1.125.2.2 2002/09/30 19:55:08 tgl Exp $
+ *       $Header: /cvsroot/pgsql/src/backend/tcop/utility.c,v 1.125.2.3 2005/01/24 17:46:58 tgl Exp $
  *
  *-------------------------------------------------------------------------
  */
@@ -640,6 +640,8 @@ ProcessUtility(Node *parsetree,
                        {
                                LoadStmt   *stmt = (LoadStmt *) parsetree;
 
+                               if (!superuser())
+                                       elog(ERROR, "permission denied");
                                closeAllVfds(); /* probably not necessary... */
                                load_file(stmt->filename);
                        }