Re: ALTER USER SET log_* not allowed...

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: ALTER USER SET log_* not allowed...
Дата
Msg-id 13364.1100104895@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: ALTER USER SET log_* not allowed...  (Andrew McMillan <andrew@catalyst.net.nz>)
Ответы Re: ALTER USER SET log_* not allowed...  (Bruce Momjian <pgman@candle.pha.pa.us>)
Список pgsql-bugs
Andrew McMillan <andrew@catalyst.net.nz> writes:
> The current functionality could be useful inside particular code paths
> of an application, where you want to increase the log verbosity in a
> particular part of the code, when it (unpredictably) happens, without
> nuking the logs entirely.
> Of course you are superuser when you review such logs, but I wouldn't
> usually want the db connection from the application to have to run as
> superuser if I could help it...  especially not a web application.

Sure.  There is a workaround for that though, which is to provide a
SECURITY DEFINER function for the app to call that will adjust the
logging level for it, rather than trying to do the SET directly in
unprivileged code.

            regards, tom lane

В списке pgsql-bugs по дате отправления:

Предыдущее
От: "Riccardo G. Facchini"
Дата:
Сообщение: bugreport 7.4.5
Следующее
От: Bruce Momjian
Дата:
Сообщение: Re: ALTER USER SET log_* not allowed...