Disallow LOAD to non-superusers. Per report from John Heasman.

tglsfdc · tglsfdc · commit ad538d8bcd88 · 2005-01-24T17:46:16.000Z
diff --git a/src/backend/tcop/utility.c b/src/backend/tcop/utility.c
@@ -10,7 +10,7 @@
  *
  *
  * IDENTIFICATION
- *	  $PostgreSQL: pgsql/src/backend/tcop/utility.c,v 1.231 2004/12/31 22:01:16 pgsql Exp $
+ *	  $PostgreSQL: pgsql/src/backend/tcop/utility.c,v 1.232 2005/01/24 17:46:16 tgl Exp $
  *
  *-------------------------------------------------------------------------
  */
@@ -803,6 +803,10 @@ ProcessUtility(Node *parsetree,
 			{
 				LoadStmt   *stmt = (LoadStmt *) parsetree;
 
+				if (!superuser())
+					ereport(ERROR,
+							(errcode(ERRCODE_INSUFFICIENT_PRIVILEGE),
+							 errmsg("must be superuser to do LOAD")));
 				closeAllVfds(); /* probably not necessary... */
 				load_file(stmt->filename);
 			}

Original file line number	Diff line number	Diff line change
`@@ -10,7 +10,7 @@`
`10`	`10`	`*`
`11`	`11`	`*`
`12`	`12`	`* IDENTIFICATION`
`13`		`- * $PostgreSQL: pgsql/src/backend/tcop/utility.c,v 1.231 2004/12/31 22:01:16 pgsql Exp $`
	`13`	`+ * $PostgreSQL: pgsql/src/backend/tcop/utility.c,v 1.232 2005/01/24 17:46:16 tgl Exp $`
`14`	`14`	`*`
`15`	`15`	`*-------------------------------------------------------------------------`
`16`	`16`	`*/`
`@@ -803,6 +803,10 @@ ProcessUtility(Node *parsetree,`
`803`	`803`	`{`
`804`	`804`	`LoadStmt stmt = (LoadStmt ) parsetree;`
`805`	`805`
	`806`	`+ if (!superuser())`
	`807`	`+ ereport(ERROR,`
	`808`	`+ (errcode(ERRCODE_INSUFFICIENT_PRIVILEGE),`
	`809`	`+ errmsg("must be superuser to do LOAD")));`
`806`	`810`	`closeAllVfds(); /* probably not necessary... */`
`807`	`811`	`load_file(stmt->filename);`
`808`	`812`	`}`