Re: LISTEN filtering

"Greg Sabino Mullane" <greg@turnstep.com> writes:
> Quick idea to toss out there: allowing an option to LISTEN to
> only 'hear' from superusers (or self).

This seems like a pretty bad idea from a security policy standpoint,
in that it would encourage use of superuser state to run ordinary
applications.

> I've got an app that uses a lot
> of listen/notify to talk to other subprocesses. However, it
> would be nice if non-superusers could not affect the behavior
> of this application: right now, anyone can issue a NOTIFY.

Anyone connected to the same database, yes.  Can't you just restrict use
of the database to trustworthy apps?

            regards, tom lane