Tom Lane wrote:
> [EMAIL PROTECTED] writes:
> > select table privilege in postgres allows user to create index on the table
>
> Actually, it appears that CREATE INDEX has no permission check at all.
>
> I agree this is a bug. Probably CREATE INDEX should require ownership
> permission, the same as ALTER TABLE.
Added to TODO:
* Allow only owner to create indexes
--
Bruce Momjian | http://candle.pha.pa.us
[EMAIL PROTECTED] | (610) 853-3000
+ If your life is a hard drive, | 830 Blythe Avenue
+ Christ can be your backup. | Drexel Hill, Pennsylvania 19026
---------------------------(end of broadcast)---------------------------
TIP 5: Have you checked our extensive FAQ?
http://www.postgresql.org/users-lounge/docs/faq.html
