Re: Hiding name and version - Mailing list pgsql-general

From Tom Lane
Subject Re: Hiding name and version
Date
Msg-id 15921.1442513497@sss.pgh.pa.us
Whole thread Raw
In response to Re: Hiding name and version  ("Joshua D. Drake" <jd@commandprompt.com>)
Responses Re: Hiding name and version
List pgsql-general
"Joshua D. Drake" <jd@commandprompt.com> writes:
> On 09/17/2015 10:32 AM, Quiroga, Damian wrote:
>> Is it possible to prevent users from running the �version� function or
>> all system information functions? If so, how?

> You could probably revoke access to the function(s) (I haven't tried it
> because it seems very silly).

I believe revoking public execute access would work, but I concur that
this specific request seems entirely pointless.  Anyone with SQL-level
access to the server, and a copy of the release notes, can soon determine
what version they are talking to by testing for the presence or absence of
assorted features and bugs.

Keep in mind also that pg_dump or pg_upgrade would not preserve such
alterations to system functions.

            regards, tom lane


pgsql-general by date:

Previous
From: "Quiroga, Damian"
Date:
Subject: Re: Hiding name and version
Next
From: Tom Lane
Date:
Subject: Re: Hiding name and version