Re: who can view pg_stat_activity?

Поиск
Список
Период
Сортировка
От Don Seiler
Тема Re: who can view pg_stat_activity?
Дата
Msg-id CAHJZqBDPCQ+9WahY4mpo98zXhf6UV1N1C61-D=5f5x0i4P52GQ@mail.gmail.com
обсуждение исходный текст
Ответ на Re: who can view pg_stat_activity?  (Cory Nemelka <cnemelka@gmail.com>)
Ответы Re: who can view pg_stat_activity?
Список pgsql-admin
On Wed, Feb 7, 2018 at 11:34 AM, Cory Nemelka <cnemelka@gmail.com> wrote:
this seems to be a security hole.  this means I can see query text for queries that aren't mine.  anyone else concerned?

--cnemelka

On Wed, Feb 7, 2018 at 10:17 AM, Shreeyansh Dba <shreeyansh2014@gmail.com> wrote:
Hi Mark Steben,

There is no superuser required to view pg_stat_activity, a normal user can also view or access.

I believe Shreeyansh is incorrect. You can view some fields as a normal user but you can't view query text (in addition to some others) unless you are superuser, or perhaps the new monitoring role in Pg10.

Don. 

--
Don Seiler
www.seiler.us

В списке pgsql-admin по дате отправления:

Предыдущее
От: Cory Nemelka
Дата:
Сообщение: Re: who can view pg_stat_activity?
Следующее
От: Cory Nemelka
Дата:
Сообщение: Re: who can view pg_stat_activity?