Re: Is this a bug, possible security hole, or wrong

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: Is this a bug, possible security hole, or wrong
Дата
Msg-id 18875.1023975836@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: Is this a bug, possible security hole, or wrong  (Mike Mascari <mascarm@mascari.com>)
Список pgsql-general
Mike Mascari <mascarm@mascari.com> writes:
> If a user has permissions to write PL/SQL functions, and the statistics
> collector is running with STATS_COMMAND_STRING = true, could not that
> user "log" other users' queries using the same technique I described by
> querying pg_stat_activity?

Not unless he's superuser.

            regards, tom lane

В списке pgsql-general по дате отправления:

Предыдущее
От: Mike Mascari
Дата:
Сообщение: Re: Is this a bug, possible security hole, or wrong
Следующее
От: Thomas Lockhart
Дата:
Сообщение: Re: automatic time zone conversion