From 83d1a63b822a3242f95200bd85e9eadd72db1e20 Mon Sep 17 00:00:00 2001 From: Hari Babu Date: Mon, 9 Jul 2018 15:15:09 +1000 Subject: [PATCH] Revoke pg_stat_statements_reset() permissions Commit 25fff40798 has granted the execute permissions of the pg_stat_statements_reset() function to "pg_read_all_stats" role. As this role is meant to read the stats, but not to reset. So revoke the permissions on reset() function from public. --- contrib/pg_stat_statements/pg_stat_statements--1.5--1.6.sql | 7 +++++++ contrib/pg_stat_statements/pg_stat_statements.control | 2 +- 2 files changed, 8 insertions(+), 1 deletion(-) create mode 100644 contrib/pg_stat_statements/pg_stat_statements--1.5--1.6.sql diff --git a/contrib/pg_stat_statements/pg_stat_statements--1.5--1.6.sql b/contrib/pg_stat_statements/pg_stat_statements--1.5--1.6.sql new file mode 100644 index 0000000000..5f897f74dc --- /dev/null +++ b/contrib/pg_stat_statements/pg_stat_statements--1.5--1.6.sql @@ -0,0 +1,7 @@ +/* contrib/pg_stat_statements/pg_stat_statements--1.5--1.6.sql */ + +-- complain if script is sourced in psql, rather than via ALTER EXTENSION +\echo Use "ALTER EXTENSION pg_stat_statements UPDATE TO '1.6'" to load this file. \quit + +-- Don't want this to be available to non-superusers. +REVOKE ALL ON FUNCTION pg_stat_statements_reset() FROM PUBLIC; \ No newline at end of file diff --git a/contrib/pg_stat_statements/pg_stat_statements.control b/contrib/pg_stat_statements/pg_stat_statements.control index 193fcdfafa..617038b4c0 100644 --- a/contrib/pg_stat_statements/pg_stat_statements.control +++ b/contrib/pg_stat_statements/pg_stat_statements.control @@ -1,5 +1,5 @@ # pg_stat_statements extension comment = 'track execution statistics of all SQL statements executed' -default_version = '1.5' +default_version = '1.6' module_pathname = '$libdir/pg_stat_statements' relocatable = true -- 2.16.1.windows.4