Re: dblink connection security

Robert Treat wrote:
>>> Joe Conway <mail@joeconway.com> writes:
>> Well certainly dbi-link has the exact same issue.
>
> dbi-link only works in plperlu, so you've already decided your superuser only.

How so -- it is fundamentally no different than dblink, which is C
language (also untrusted).

I think the issue is that once the superuser creates said functions,
usage of the functions is automatically granted to PUBLIC, no? Being an
untrusted language just means that it takes a superuser to create the
functions using that language, not to use the functions themselves.

Joe