Re: Allowing to create LEAKPROOF functions to non-superuser

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: Allowing to create LEAKPROOF functions to non-superuser
Дата
Msg-id 2007310.1619378038@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: Allowing to create LEAKPROOF functions to non-superuser  (Stephen Frost <sfrost@snowman.net>)
Список pgsql-hackers
Stephen Frost <sfrost@snowman.net> writes:
> * Andrey Borodin (x4mmm@yandex-team.ru) wrote:
>> Customer was restoring pg_dump of on-premise ERP known as 1C (something like TurboTax) with this add-on [0]

> Erm, it's very clearly not leakproof and will happily return information
> about the value passed in during some error cases...

Yeah, that's pretty much a poster-child example for NOT letting
random users fool with leakproofness settings.

            regards, tom lane



В списке pgsql-hackers по дате отправления:

Предыдущее
От: Юрий Соколов
Дата:
Сообщение: Re: [HACKERS] Cached plans and statement generalization
Следующее
От: Alvaro Herrera
Дата:
Сообщение: Re: Fix dropped object handling in pg_event_trigger_ddl_commands