aboutsummaryrefslogtreecommitdiff
path: root/src/tutorial
diff options
context:
space:
mode:
authorNoah Misch <noah@leadboat.com>2017-08-07 07:09:28 -0700
committerNoah Misch <noah@leadboat.com>2017-08-07 07:09:31 -0700
commit156099630320fcb72d41ae90b91f15ed0dfbc271 (patch)
tree4d4360494aca71c629ce1a02ca71f22f16a407b9 /src/tutorial
parentf6fc72cb697295c1807d14ee5c52d2086d1864af (diff)
downloadpostgresql-156099630320fcb72d41ae90b91f15ed0dfbc271.tar.gz
postgresql-156099630320fcb72d41ae90b91f15ed0dfbc271.zip
Again match pg_user_mappings to information_schema.user_mapping_options.
Commit 3eefc51053f250837c3115c12f8119d16881a2d7 claimed to make pg_user_mappings enforce the qualifications user_mapping_options had been enforcing, but its removal of a longstanding restriction left them distinct when the current user is the subject of a mapping yet has no server privileges. user_mapping_options emits no rows for such a mapping, but pg_user_mappings includes full umoptions. Change pg_user_mappings to show null for umoptions. Back-patch to 9.2, like the above commit. Reviewed by Tom Lane. Reported by Jeff Janes. Security: CVE-2017-7547
Diffstat (limited to 'src/tutorial')
0 files changed, 0 insertions, 0 deletions