Re: Granting SET and ALTER SYSTE privileges for GUCs

Поиск
Список
Период
Сортировка
От David G. Johnston
Тема Re: Granting SET and ALTER SYSTE privileges for GUCs
Дата
Msg-id CAKFQuwa2dZx5h=XSGPb3kBpHHMcLvkdpm-xcUnqVpnMP1yAZfg@mail.gmail.com
обсуждение исходный текст
Ответ на Re: Granting SET and ALTER SYSTE privileges for GUCs  (Tom Lane <tgl@sss.pgh.pa.us>)
Список pgsql-hackers
On Wed, Mar 30, 2022 at 8:46 AM Tom Lane <tgl@sss.pgh.pa.us> wrote: 
I don't want to do that with
a blunderbuss, but perhaps there's an argument to do it for specific
cases (search_path comes to mind, though the performance cost could be
significant, since I think setting that in function SET clauses is
common).
 

I suspect it became considerably moreso when we fixed the search_path CVE since we basically told people that doing so, despite the possible performance hit, was the easiest solution to their immediate dump/restore failures.  But ISTM that because that SET has a function invocation context it could bypass any such check.  Though maybe the DO command exposes a flaw in that idea.
David J.

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Andres Freund
Дата:
Сообщение: Re: Adding CI to our tree
Следующее
От: Greg Stark
Дата:
Сообщение: Re: Frontend error logging style