[postgis-devel] Allowing use of PostGIS EXTENSION w/out raster

[Sandro Santilli]

On Mon, Oct 09, 2017 at 08:20:51AM -0400, Greg Troxel wrote:

> One thing that seems strange is that I can install postgis under my uid,
> and then the code runs as postgres (at least the core dumps from raster
> are that way :-).  Perhaps that's only ok because I am a pgsql
> superuser, and a regular user will need dba to install into their
> database.

Yes, it takes superuser privileges to install potentially dangerous
functions (being those implemented in "unsafe" languages like C).

--strk;