Commit ad538d8b authored by Tom Lane's avatar Tom Lane

Disallow LOAD to non-superusers. Per report from John Heasman.

parent 0ffe9f79
...@@ -10,7 +10,7 @@ ...@@ -10,7 +10,7 @@
* *
* *
* IDENTIFICATION * IDENTIFICATION
* $PostgreSQL: pgsql/src/backend/tcop/utility.c,v 1.231 2004/12/31 22:01:16 pgsql Exp $ * $PostgreSQL: pgsql/src/backend/tcop/utility.c,v 1.232 2005/01/24 17:46:16 tgl Exp $
* *
*------------------------------------------------------------------------- *-------------------------------------------------------------------------
*/ */
...@@ -803,6 +803,10 @@ ProcessUtility(Node *parsetree, ...@@ -803,6 +803,10 @@ ProcessUtility(Node *parsetree,
{ {
LoadStmt *stmt = (LoadStmt *) parsetree; LoadStmt *stmt = (LoadStmt *) parsetree;
if (!superuser())
ereport(ERROR,
(errcode(ERRCODE_INSUFFICIENT_PRIVILEGE),
errmsg("must be superuser to do LOAD")));
closeAllVfds(); /* probably not necessary... */ closeAllVfds(); /* probably not necessary... */
load_file(stmt->filename); load_file(stmt->filename);
} }
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment