Re: Default Roles

Поиск
Список
Период
Сортировка
От Stephen Frost
Тема Re: Default Roles
Дата
Msg-id 20150513123500.GO30322@tamriel.snowman.net
обсуждение исходный текст
Ответ на Re: Default Roles  (Heikki Linnakangas <hlinnaka@iki.fi>)
Список pgsql-hackers
All,

* Heikki Linnakangas (hlinnaka@iki.fi) wrote:
> On 05/13/2015 06:07 AM, Stephen Frost wrote:
> >This does change the XLOG functions to require pg_monitor, as discussed
> >on the other thread where it was pointed out by Heikki that the XLOG
> >location information could be used to extract sensitive information
> >based on what happens during compression.
>
> That seems like an orthogonal issue, not something that should be
> bundled in this patch. IIRC we didn't reach a consensus on what to
> do about the compression-leaks-information issue. One idea was to
> make it configurable on a per-table basis, and if we do that,
> perhaps we don't need to restrict access to
> pg_current_xlog_location() and friends.

Updated patch attached which removes the changes to the XLOG location
functions and adds checks for AlterRole and RenameRole to prevent
altering or renaming the default roles.  Also adds '\duS'/'\dgS'
support to psql, to show default roles only when asked.

    Thanks!

        Stephen

Вложения

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Robert Haas
Дата:
Сообщение: Re: Disabling trust/ident authentication configure option
Следующее
От: Robert Haas
Дата:
Сообщение: Re: Streaming replication and WAL archive interactions