hcq/openGauss-server
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

禁止普通用户连接数据库模板template1

Browse Source 
Signed-off-by: lijianfeng <bigtimer@qq.com>
This commit is contained in:
lijianfeng
2022-11-24 02:38:21 +00:00
committed by Gitee
parent cd1244c51f
commit c495fcaa5f
1 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
src/common/backend/utils/init/postinit.cpp
View File

@ -518,11 +518,14 @@ static void CheckConnAuthority(const char* name, bool am_superuser)
if (IsUnderPostmaster && !IsAutoVacuumWorkerProcess() && !IsJobSchedulerProcess() && !IsJobWorkerProcess() &&
!IsBgWorkerProcess() && !IsTxnSnapCapturerProcess() && !IsTxnSnapWorkerProcess() && !IsRbCleanerProcess() && !IsRbWorkerProcess() &&
!IsCfsShrinkerProcess()) {
bool isLocalAddr = false;
if (u_sess->proc_cxt.MyProcPort != NULL) {
isLocalAddr = IsLocalAddr(u_sess->proc_cxt.MyProcPort);
}
/* Database Security: Check privilege to connect to the database.
* Only superuser on the local machine can connect to "template1".*/
if (IS_PGXC_COORDINATOR && IsConnFromApp() &&
(!am_superuser || !IsLocalAddr(u_sess->proc_cxt.MyProcPort)) &&
strcmp(name, "template1") == 0) {
if (strcmp(name, "template1") == 0 && IsConnFromApp() && !(am_superuser && isLocalAddr)) {
ereport(FATAL,
(errcode(ERRCODE_INSUFFICIENT_PRIVILEGE),
errmsg("permission denied for database \"%s\"", name),