Re: [ANNOUNCE] Advisory on possibly insecure security definer functions

Поиск
Список
Период
Сортировка
От Karsten Hilbert
Тема Re: [ANNOUNCE] Advisory on possibly insecure security definer functions
Дата
Msg-id 20070218103815.GF5088@merkur.hilbert.loc
обсуждение исходный текст
Ответ на Re: [ANNOUNCE] Advisory on possibly insecure security definer functions  (Michael Fuhr <mike@fuhr.org>)
Список pgsql-general
Дерево обсуждения 
On Sat, Feb 17, 2007 at 11:31:19AM -0700, Michael Fuhr wrote:

> If you schema-qualify objects instead of setting search_path then
> don't forget about operators.
I knew I had missed something.

> SELECT col
>   FROM schemaname.tablename
>  WHERE othercol operator(pg_catalog.=) schemaname.funcname(someval)

Good to know what.

Thanks,
Karsten
--
GPG key ID E4071346 @ wwwkeys.pgp.net
E167 67FD A291 2BEA 73BD  4537 78B9 A9F9 E407 1346

В списке pgsql-general по дате отправления:

Предыдущее
От: Magnus Hagander
Дата:
Сообщение: Re: Automated backups for PG running on Windows Server?
Следующее
От: Karsten Hilbert
Дата:
Сообщение: Why *exactly* is date_trunc() not immutable ?