Postgres Pro
Downloads
Home   >   mailing lists

Re: Add on_trusted_init and on_untrusted_init to plperl [PATCH] - Mailing list pgsql-hackers

From Tom Lane
Subject Re: Add on_trusted_init and on_untrusted_init to plperl [PATCH]
Date
Msg-id 17141.1264698778@sss.pgh.pa.us
Whole thread Raw
In response to Re: Add on_trusted_init and on_untrusted_init to plperl [PATCH]  (Andrew Dunstan <andrew@dunslane.net>)
Responses Re: Add on_trusted_init and on_untrusted_init to plperl [PATCH]  (Tim Bunce <Tim.Bunce@pobox.com>)
List pgsql-hackers
Tree view 
Andrew Dunstan <andrew@dunslane.net> writes:
> Tom Lane wrote:
>> Isn't it a security hole if on_trusted_init is USERSET?  That means
>> an unprivileged user can determine what will happen in plperlu.
>> SUSET would be saner.

> ITYM on_untrusted_init.

Right, sorry, got 'em backwards.
        regards, tom lane

pgsql-hackers by date:

Previous
From: Pavel Stehule
Date:
Subject: Re: Review: listagg aggregate
Next
From: Pavel Stehule
Date:
Subject: Re: Review: listagg aggregate