Re: security issues

Laurenz Albe <laurenz.albe@cybertec.at> writes:
> On Fri, 2021-12-10 at 15:33 +0100, Frank Eckes wrote:
>> And even worse, if i define a foreign server (e.g ORACLE) everybody can 
>> see the credentials in a user mapping

> Then you use Oracle external authentication, for example with a
> secure key store on the PostgreSQL server.  Then you don't need a
> password.

That's one way, but AFAIK the above claim is nonsense.  You can
only see the connection options for user mappings that belong
to you (unless you're a superuser).

            regards, tom lane