Commit c7bbe994 authored by Tom Lane's avatar Tom Lane

Fix ALTER DATABASE RENAME to allow the operation if user is a superuser

who for some reason isn't marked usecreatedb.  Per report from Alexander
Pravking.  Also fix sloppy coding in have_createdb_privilege().
parent fa5e4401
...@@ -15,7 +15,7 @@ ...@@ -15,7 +15,7 @@
* *
* *
* IDENTIFICATION * IDENTIFICATION
* $PostgreSQL: pgsql/src/backend/commands/dbcommands.c,v 1.152 2005/03/04 20:21:05 tgl Exp $ * $PostgreSQL: pgsql/src/backend/commands/dbcommands.c,v 1.153 2005/03/12 21:11:50 tgl Exp $
* *
*------------------------------------------------------------------------- *-------------------------------------------------------------------------
*/ */
...@@ -722,8 +722,8 @@ RenameDatabase(const char *oldname, const char *newname) ...@@ -722,8 +722,8 @@ RenameDatabase(const char *oldname, const char *newname)
aclcheck_error(ACLCHECK_NOT_OWNER, ACL_KIND_DATABASE, aclcheck_error(ACLCHECK_NOT_OWNER, ACL_KIND_DATABASE,
oldname); oldname);
/* must have createdb */ /* must have createdb rights */
if (!have_createdb_privilege()) if (!superuser() && !have_createdb_privilege())
ereport(ERROR, ereport(ERROR,
(errcode(ERRCODE_INSUFFICIENT_PRIVILEGE), (errcode(ERRCODE_INSUFFICIENT_PRIVILEGE),
errmsg("permission denied to rename database"))); errmsg("permission denied to rename database")));
...@@ -883,8 +883,7 @@ AlterDatabaseOwner(const char *dbname, AclId newOwnerSysId) ...@@ -883,8 +883,7 @@ AlterDatabaseOwner(const char *dbname, AclId newOwnerSysId)
bool isNull; bool isNull;
HeapTuple newtuple; HeapTuple newtuple;
/* changing owner's database for someone else: must be superuser */ /* must be superuser to change ownership */
/* note that the someone else need not have any permissions */
if (!superuser()) if (!superuser())
ereport(ERROR, ereport(ERROR,
(errcode(ERRCODE_INSUFFICIENT_PRIVILEGE), (errcode(ERRCODE_INSUFFICIENT_PRIVILEGE),
...@@ -999,24 +998,22 @@ get_db_info(const char *name, Oid *dbIdP, int4 *ownerIdP, ...@@ -999,24 +998,22 @@ get_db_info(const char *name, Oid *dbIdP, int4 *ownerIdP,
return gottuple; return gottuple;
} }
/* Check if current user has createdb privileges */
static bool static bool
have_createdb_privilege(void) have_createdb_privilege(void)
{ {
bool result = false;
HeapTuple utup; HeapTuple utup;
bool retval;
utup = SearchSysCache(SHADOWSYSID, utup = SearchSysCache(SHADOWSYSID,
Int32GetDatum(GetUserId()), Int32GetDatum(GetUserId()),
0, 0, 0); 0, 0, 0);
if (HeapTupleIsValid(utup))
if (!HeapTupleIsValid(utup)) {
retval = false; result = ((Form_pg_shadow) GETSTRUCT(utup))->usecreatedb;
else
retval = ((Form_pg_shadow) GETSTRUCT(utup))->usecreatedb;
ReleaseSysCache(utup); ReleaseSysCache(utup);
}
return retval; return result;
} }
/* /*
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment