Re: Fixing insecure security definer functions

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: Fixing insecure security definer functions
Дата
Msg-id 24792.1180406728@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: Fixing insecure security definer functions  (Stephen Frost <sfrost@snowman.net>)
Ответы Re: Fixing insecure security definer functions  (Stephen Frost <sfrost@snowman.net>)
Список pgsql-hackers
Stephen Frost <sfrost@snowman.net> writes:
> It would be useful to have a function which could be passed a relative
> (to the caller's search path) object name and would return the fully
> qualified name of that object.  In this way, functions could be written
> which take relative arguments from the user but *only* those explicitly
> checked for.

Your example doesn't seem to be doing anything interesting ... am I
misunderstanding, or did you omit the actual checking?  Also, if the
search path is controlled by the function, what good is this ---
wouldn't it always result in a trusted schema?
        regards, tom lane


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Stephen Frost
Дата:
Сообщение: Re: Fixing insecure security definer functions
Следующее
От: Tatsuo Ishii
Дата:
Сообщение: Re: What is the maximum encoding-conversion growth rate, anyway?