From a23133a4d7f4f4523f2aa8c1cd5f48e0f85d4137 Mon Sep 17 00:00:00 2001 From: Tom Lane Date: Mon, 24 Jan 2005 17:46:49 +0000 Subject: [PATCH] Disallow LOAD to non-superusers. Per report from John Heasman. --- src/backend/tcop/utility.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src/backend/tcop/utility.c b/src/backend/tcop/utility.c index 1c3ea71d2fe..f8b30d8a916 100644 --- a/src/backend/tcop/utility.c +++ b/src/backend/tcop/utility.c @@ -10,7 +10,7 @@ * * * IDENTIFICATION - * $Header: /cvsroot/pgsql/src/backend/tcop/utility.c,v 1.180 2002/10/21 20:31:52 momjian Exp $ + * $Header: /cvsroot/pgsql/src/backend/tcop/utility.c,v 1.180.2.1 2005/01/24 17:46:49 tgl Exp $ * *------------------------------------------------------------------------- */ @@ -694,6 +694,8 @@ ProcessUtility(Node *parsetree, { LoadStmt *stmt = (LoadStmt *) parsetree; + if (!superuser()) + elog(ERROR, "permission denied"); closeAllVfds(); /* probably not necessary... */ load_file(stmt->filename); } -- 2.39.5