Disallow LOAD to non-superusers. Per report from John Heasman.
authorTom Lane <tgl@sss.pgh.pa.us>
Mon, 24 Jan 2005 17:46:58 +0000 (17:46 +0000)
committerTom Lane <tgl@sss.pgh.pa.us>
Mon, 24 Jan 2005 17:46:58 +0000 (17:46 +0000)
src/backend/tcop/utility.c

index c0d2362f7676ebc178f9e942dfe92b4380ee3fcb..0547ac26d3703e0880d530a687f26503d79449f0 100644 (file)
@@ -10,7 +10,7 @@
  *
  *
  * IDENTIFICATION
- *   $Header: /cvsroot/pgsql/src/backend/tcop/utility.c,v 1.125.2.2 2002/09/30 19:55:08 tgl Exp $
+ *   $Header: /cvsroot/pgsql/src/backend/tcop/utility.c,v 1.125.2.3 2005/01/24 17:46:58 tgl Exp $
  *
  *-------------------------------------------------------------------------
  */
@@ -640,6 +640,8 @@ ProcessUtility(Node *parsetree,
            {
                LoadStmt   *stmt = (LoadStmt *) parsetree;
 
+               if (!superuser())
+                   elog(ERROR, "permission denied");
                closeAllVfds(); /* probably not necessary... */
                load_file(stmt->filename);
            }