Re: Restrict permissions on schema to hide pl/pgsql code

Поиск
Список
Период
Сортировка
От David G. Johnston
Тема Re: Restrict permissions on schema to hide pl/pgsql code
Дата
Msg-id CAKFQuwak90CZEsyuCqGeibmRsH-9pzer8O086mzgomdGtF-TSA@mail.gmail.com
обсуждение исходный текст
Ответ на Re: Restrict permissions on schema to hide pl/pgsql code  (Swanand Kshirsagar <swanandon@gmail.com>)
Ответы Re: Restrict permissions on schema to hide pl/pgsql code
Re: Restrict permissions on schema to hide pl/pgsql code
Список pgsql-admin
You can consider this email to have accomplished both.  Lacking someone saying they they are working on it and pointing you to a patch you can safely operate under the assumption that this behavior isn’t going to change.  I suppose its possible with the recent row-level security feature that a fresh look leveraging that facility could be considered but AFAIK that hasn’t and isn’t being done.

There is the commitfest website but otherwise plans and complaint raising are pretty informal here.  Though typically the -general list is a better choice for inquiries of this nature.

David J.

On Wednesday, July 24, 2019, Swanand Kshirsagar <swanandon@gmail.com> wrote:
Yes, that's the reason why I tried revoking permissions from pg_catalog.pg_proc table.

What's the right way to notify this OR check if there is any plan in roadmap?

On Wed, Jul 24, 2019 at 6:58 PM David G. Johnston <david.g.johnston@gmail.com> wrote:
On Wednesday, July 24, 2019, Swanand Kshirsagar <swanandon@gmail.com> wrote:
Isn't revoking permissions from a schema should take care of this situation?

The pl/pgsql function body is stored in pg_catalog which the user still has permission to read.  There isn’t a good/supported way to work around this behavior.

David J.


В списке pgsql-admin по дате отправления:

Предыдущее
От: Swanand Kshirsagar
Дата:
Сообщение: Re: Restrict permissions on schema to hide pl/pgsql code
Следующее
От: Stephen Frost
Дата:
Сообщение: Re: Restrict permissions on schema to hide pl/pgsql code