Simon Riggs <si...@2ndquadrant.com> writes:
> So I was thinking about various annoying admin/security issues
> recently, so I came up with this: a new type of user called a
> “superowner”. It’s somewhere between a superuser and a normal user.
> Superowner would own all objects defined by users, so it would do
> useful things in contexts where superuser is not available.
What about just saying that the database owner has those privileges?
After all, the ultimate privilege of an owner is to drop the object
(and then remake it as she pleases), and the DB owner has that option
w.r.t. the whole database. So I'm not sure we need to invent a new
concept.
With or without it being a separate property, there's a point I think
you missed: this should only extend to objects owned by normal users,
not by superusers. Otherwise there are all sorts of security issues.
regards, tom lane
--
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers
