diff options
| author | Stephen Frost | 2016-04-08 20:56:27 +0000 |
|---|---|---|
| committer | Stephen Frost | 2016-04-08 20:56:27 +0000 |
| commit | 293007898d3fa5a815c1c5814df53627553f114d (patch) | |
| tree | 462f41b12ee37a4f0de5b6707bd49b734cb24668 /src/backend/commands/alter.c | |
| parent | fa6075e5515c6878b2c1fe1c6435dd7ed847857d (diff) | |
Reserve the "pg_" namespace for roles
This will prevent users from creating roles which begin with "pg_" and
will check for those roles before allowing an upgrade using pg_upgrade.
This will allow for default roles to be provided at initdb time.
Reviews by José Luis Tallón and Robert Haas
Diffstat (limited to 'src/backend/commands/alter.c')
| -rw-r--r-- | src/backend/commands/alter.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/backend/commands/alter.c b/src/backend/commands/alter.c index 7e39422ecd6..27b75795928 100644 --- a/src/backend/commands/alter.c +++ b/src/backend/commands/alter.c @@ -747,6 +747,9 @@ ExecAlterOwnerStmt(AlterOwnerStmt *stmt) { Oid newowner = get_rolespec_oid(stmt->newowner, false); + check_rolespec_name(stmt->newowner, + "Cannot make reserved roles owners of objects."); + switch (stmt->objectType) { case OBJECT_DATABASE: |