Disallow LOAD to non-superusers. Per report from John Heasman.

tglsfdc · tglsfdc · commit ae5b7a0c5b0f · 2005-01-24T17:46:58.000Z
diff --git a/src/backend/tcop/utility.c b/src/backend/tcop/utility.c
@@ -10,7 +10,7 @@
  *
  *
  * IDENTIFICATION
- *	  $Header: /cvsroot/pgsql/src/backend/tcop/utility.c,v 1.125.2.2 2002/09/30 19:55:08 tgl Exp $
+ *	  $Header: /cvsroot/pgsql/src/backend/tcop/utility.c,v 1.125.2.3 2005/01/24 17:46:58 tgl Exp $
  *
  *-------------------------------------------------------------------------
  */
@@ -640,6 +640,8 @@ ProcessUtility(Node *parsetree,
 			{
 				LoadStmt   *stmt = (LoadStmt *) parsetree;
 
+				if (!superuser())
+					elog(ERROR, "permission denied");
 				closeAllVfds(); /* probably not necessary... */
 				load_file(stmt->filename);
 			}

Original file line number	Diff line number	Diff line change
`@@ -10,7 +10,7 @@`
`10`	`10`	`*`
`11`	`11`	`*`
`12`	`12`	`* IDENTIFICATION`
`13`		`- * $Header: /cvsroot/pgsql/src/backend/tcop/utility.c,v 1.125.2.2 2002/09/30 19:55:08 tgl Exp $`
	`13`	`+ * $Header: /cvsroot/pgsql/src/backend/tcop/utility.c,v 1.125.2.3 2005/01/24 17:46:58 tgl Exp $`
`14`	`14`	`*`
`15`	`15`	`*-------------------------------------------------------------------------`
`16`	`16`	`*/`
`@@ -640,6 +640,8 @@ ProcessUtility(Node *parsetree,`
`640`	`640`	`{`
`641`	`641`	`LoadStmt stmt = (LoadStmt ) parsetree;`
`642`	`642`
	`643`	`+ if (!superuser())`
	`644`	`+ elog(ERROR, "permission denied");`
`643`	`645`	`closeAllVfds(); /* probably not necessary... */`
`644`	`646`	`load_file(stmt->filename);`
`645`	`647`	`}`