In that case what is the best practice for it? Any suggestion.
Garry
From: David G. Johnston [mailto:david.g.johnston@gmail.com] Sent: Thursday, January 18, 2018 2:16 PM To: Garry Chen <gc92@cornell.edu> Cc: pgsql-novice@lists.postgresql.org Subject: Re: how to remove set_config from all user
On Thu, Jan 18, 2018 at 12:08 PM, Garry Chen <gc92@cornell.edu> wrote:
Hi All,
Is there a way to revoke select set_config(‘eeee’,bb’,false) from users? I will not to allow any user be able to the “select set_config(….)” statement.
As a practical matter, no. They can just do: "SET ... TO ..." to get around the function privilege denial even if worked out a usable hack.