Re: Feature request dblink: Security issue - dblink user+password parameters must be optional

Поиск
Список
Период
Сортировка
От Marko Kreen
Тема Re: Feature request dblink: Security issue - dblink user+password parameters must be optional
Дата
Msg-id e51f66da0901280107p78cba189xa85f6a09ad41e3a2@mail.gmail.com
обсуждение исходный текст
Ответ на Feature request dblink: Security issue - dblink user+password parameters must be optional  (Hermann Muster <Hermann.Muster@gmx.de>)
Список pgsql-general
On 1/28/09, Hermann Muster <Hermann.Muster@gmx.de> wrote:
> When creating a view via DBLINK, the user=... and password=... parameters
> shall be optional. If they are left out, then the current user accessing the
> view shall be impersonated implicitely to the "dblinked" database as well.
> Forcing anybody to hardcode a password readable within the view definition
> should be an absolute DON'T!
>
>  Haven't found a better place to post this request. Hope the author of
> dblink is reading it here, too. :-)

I think this will be properly fixed by SQL-MED connection handling in 8.4.

In older version maybe you can use wrapper function around dblink
that constructs per-user connect string.

--
marko

В списке pgsql-general по дате отправления:

Предыдущее
От: Sim Zacks
Дата:
Сообщение: Re: Rollback of Query Cancellation
Следующее
От: Dave Page
Дата:
Сообщение: Re: About PostgreSQL Installer