Skip to content

Commit 190a584

Browse files
committed
fix: use explicit revoke for the trigger grant
1 parent 57ced1c commit 190a584

1 file changed

Lines changed: 5 additions & 1 deletion

File tree

sql/pg_net.sql

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -354,4 +354,8 @@ $$;
354354

355355
grant usage on schema net to PUBLIC;
356356
grant all on all sequences in schema net to PUBLIC;
357-
grant select, insert, update, delete, truncate, references on all tables in schema net to PUBLIC;
357+
grant all on all tables in schema net to PUBLIC;
358+
359+
-- we do not want users to be able to create triggers on tables in the net schema to avoid
360+
-- privilege escalation bugs.
361+
revoke trigger on all tables in schema net from PUBLIC;

0 commit comments

Comments
 (0)