Kevin Jacobs wrote:
>
> > > 1) If Plpython is installed as a trusted language, and from what little I
> > > can glean from the documentation, it should not have any filesystem access.
> > > However, the default behavior of the restricted execution environment
> > > being used allows read-only filesystem access.
> >
> > we have 'read-only filesystem access anyhow' :
>
> Then I consider this a bug if a non-super-user can do this.
It's not that bad - only postgresql superuser can use copy to/from file
.
-------------
Hannu