Re: Security Issues: Allowing Clients to Execute SQL in the Backend.

Поиск
Список
Период
Сортировка
От Geoff Montee
Тема Re: Security Issues: Allowing Clients to Execute SQL in the Backend.
Дата
Msg-id CAA7biFNB_xWU3fvLxzgGNY53MSVMrpVQdtpsZ_Q7aJ78Yj_Q_A@mail.gmail.com
обсуждение исходный текст
Ответ на Re: Security Issues: Allowing Clients to Execute SQL in the Backend.  (Hello World <worldanizer@gmail.com>)
Список pgsql-general
Дерево обсуждения
They don't apply server-wide. They apply to that user's session:


Geoff


On Wed, Apr 30, 2014 at 6:19 AM, Hello World <worldanizer@gmail.com> wrote:

SET statement_timeout=0;
SET work_mem=1024GB;

I just realized about the SET command.

Isn't it weird that any user can set parameters such as this that will apply server wide? to all future sessions?

I noticed that some of the parameters can only be set by superusers, and some require re-start, but still. Anybody can re-configure the server..... ??

В списке pgsql-general по дате отправления:

Предыдущее
От: David Noel
Дата:
Сообщение: Re: SQL query runs fine on one platform (FreeBSD), but hangs on another (Windows)
Следующее
От: "Tomas Vondra"
Дата:
Сообщение: Re: SQL query runs fine on one platform (FreeBSD), but hangs on another (Windows)