1. 29 Apr, 2010 7 commits
  2. 28 Apr, 2010 14 commits
  3. 27 Apr, 2010 2 commits
  4. 26 Apr, 2010 6 commits
  5. 24 Apr, 2010 2 commits
  6. 23 Apr, 2010 4 commits
  7. 22 Apr, 2010 4 commits
  8. 21 Apr, 2010 1 commit
    • Tom Lane's avatar
      Enforce superuser permissions checks during ALTER ROLE/DATABASE SET, rather · a6dcd19a
      Tom Lane authored
      than during define_custom_variable().  This entails rejecting an ALTER
      command if the target variable doesn't have a known (non-placeholder)
      definition, unless the calling user is superuser.  When the variable *is*
      known, we can correctly apply the rule that only superusers can issue ALTER
      for SUSET parameters.  This allows define_custom_variable to apply ALTER's
      values for SUSET parameters at module load time, secure in the knowledge
      that only a superuser could have set the ALTER value.  This change fixes a
      longstanding gotcha in the usage of SUSET-level custom parameters; which
      is a good thing to fix now that plpgsql defines such a parameter.
      a6dcd19a