Re: Does NOTIFY leak information?
| От | Greg Sabino Mullane |
|---|---|
| Тема | Re: Does NOTIFY leak information? |
| Дата | |
| Msg-id | CAKAnmmKPYACSzM40w+Ue2T7kPFiG-Y6W26Kj3TPeSEmgEu63_A@mail.gmail.com обсуждение исходный текст |
| Ответ на | Does NOTIFY leak information? (PG Doc comments form <noreply@postgresql.org>) |
| Список | pgsql-docs |
On Wed, Dec 4, 2024 at 8:03 AM PG Doc comments form <noreply@postgresql.org> wrote:
I am interpreting this to mean that if I as user A receive a notification to
a channel that I have set up, then user B and user C will also see this
notification, irrespective of their various permissions. Am I understanding
this correctly, and if so, doesn't this qualify as an information leak?
No: it is a public broadcast, with no permissions implied (or allowed!). However, you can certainly store sensitive information elsewhere (e.g. a table), and use the notification as a way of signalling "hey, check the secure drop box, I just put something inside there"
If you still feel the docs are unclear about this, we are always welcome to wording suggestions.
Cheers,
Greg
В списке pgsql-docs по дате отправления: