summaryrefslogtreecommitdiff
path: root/contrib/seg/sql/security.sql
blob: 7dfbbaa304ac01dfe1102675939e00ad8c3d4b7c (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
--
--  Test extension script protection against search path overriding
--

CREATE ROLE regress_seg_role;
SELECT current_database() AS datname \gset
GRANT CREATE ON DATABASE :"datname" TO regress_seg_role;
SET ROLE regress_seg_role;
CREATE SCHEMA regress_seg_schema;

CREATE FUNCTION regress_seg_schema.exfun(i int) RETURNS int AS $$
BEGIN
  CREATE EXTENSION seg VERSION '1.2';

  CREATE FUNCTION regress_seg_schema.compare(oid, regclass) RETURNS boolean AS
  'BEGIN RAISE EXCEPTION ''overloaded compare() called by %'', current_user; END;' LANGUAGE plpgsql;

  CREATE OPERATOR = (LEFTARG = oid, RIGHTARG = regclass, PROCEDURE = regress_seg_schema.compare);

  ALTER EXTENSION seg UPDATE TO '1.3';

  RETURN i;
END; $$ LANGUAGE plpgsql;

CREATE SCHEMA test_schema
CREATE TABLE t(i int) PARTITION BY RANGE (i)
CREATE TABLE p1 PARTITION OF t FOR VALUES FROM (1) TO (regress_seg_schema.exfun(2));

DROP SCHEMA test_schema CASCADE;
RESET ROLE;
DROP OWNED BY regress_seg_role;
DROP ROLE regress_seg_role;