Re: tsearch_core patch: permissions and security issues

From: Gregory Stark <stark(at)enterprisedb(dot)com>
To: "Teodor Sigaev" <teodor(at)sigaev(dot)ru>
Cc: "Tom Lane" <tgl(at)sss(dot)pgh(dot)pa(dot)us>, "Oleg Bartunov" <oleg(at)sai(dot)msu(dot)su>, <pgsql-hackers(at)postgreSQL(dot)org>
Subject: Re: tsearch_core patch: permissions and security issues
Date: 2007-06-14 19:01:12
Message-ID: 87zm32tl6v.fsf@oxford.xeocode.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-advocacy pgsql-hackers

"Teodor Sigaev" <teodor(at)sigaev(dot)ru> writes:

>>> But they still need some more thought about permissions, because AFAICS
>>> mucking with a configuration can invalidate some other user's data.
>>
>> ouch. could mucking with a configuration create a corrupt index?
>
> Depending on what you mean 'corrupted'. It will not corrupted as non-readable
> or cause backend crash. But usage of such tsvector column could be limited -
> not all words will be searchable.

Am I correct to think of this like changing collations leaving your btree
index "corrupt"? In that case it probably won't cause any backend crash either
but you will get incorrect results. For example, returning different results
depending on whether the index or a full table scan is used.

--
Gregory Stark
EnterpriseDB http://www.enterprisedb.com

In response to

Responses

Browse pgsql-advocacy by date

  From Date Subject
Next Message Teodor Sigaev 2007-06-14 19:10:32 Re: tsearch_core patch: permissions and security issues
Previous Message Tom Lane 2007-06-14 18:54:07 Re: tsearch_core patch: permissions and security issues

Browse pgsql-hackers by date

  From Date Subject
Next Message Teodor Sigaev 2007-06-14 19:10:32 Re: tsearch_core patch: permissions and security issues
Previous Message Tom Lane 2007-06-14 18:54:07 Re: tsearch_core patch: permissions and security issues