Re: Interpretation of TRUSTED - Mailing list pgsql-hackers

From David Fetter
Subject Re: Interpretation of TRUSTED
Date
Msg-id 20050208223900.GG14451@fetter.org
Whole thread Raw
In response to Interpretation of TRUSTED  (Thomas Hallgren <thhal@mailblocks.com>)
Responses Re: Interpretation of TRUSTED  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-hackers
On Tue, Feb 08, 2005 at 11:12:07PM +0100, Thomas Hallgren wrote:
> Hi,
> A TRUSTED language specifies that ordinary users can use the
> language.  It also implies that access to the file system should be
> prevented. In essence, ordinary users can never access the
> filesystem.
> 
> Is it OK to design a trusted language so that it allows access to
> the filesystem provided that the session user is a super-user?

I believe that that is what UNTRUSTED languages are for.  Only the
super-user may create functions in them, although there is no inherent
restriction on other users' calling those functions.

Cheers,
D
-- 
David Fetter david@fetter.org http://fetter.org/
phone: +1 510 893 6100   mobile: +1 415 235 3778

Remember to vote!


pgsql-hackers by date:

Previous
From: Josh Berkus
Date:
Subject: Re: Query optimizer 8.0.1 (and 8.0)
Next
From: pgsql@mohawksoft.com
Date:
Subject: Re: Query optimizer 8.0.1 (and 8.0)