Re: can we mark upper/lower/textlike functions leakproof?

On 8/1/24 07:57, Robert Haas wrote:
> On Wed, Jul 31, 2024 at 4:42 PM Joe Conway <mail@joeconway.com> wrote:
>> You are assuming that everyone allows direct logins with the ability to
>> create procedures. Plenty don't.
> 
> Well, if you can send queries, then you can do the same thing, driven
> by client-side logic.

Sure. Of course you should be monitoring your production servers for 
anomalous workloads, no? "Gee, why is Joe running the same query 
millions of times that keeps throwing errors? Maybe we should go see 
what Joe is up to"

> If you can't directly send queries in any form, then I guess things
> are different.

Right, and there are plenty of those. I have even worked with at least 
one rather large one on behalf of your employer some years ago.

> But I don't really understand what kind of system you have in mind.

Well I did say I was being hand wavy ;-)

It has been a long time since I thought deeply about this. I will try to 
come back with something more concrete if no one beats me to it.

-- 
Joe Conway
PostgreSQL Contributors Team
RDS Open Source Databases
Amazon Web Services: https://aws.amazon.com