Re: Allowing to create LEAKPROOF functions to non-superuser - Mailing list pgsql-hackers

From Tom Lane
Subject Re: Allowing to create LEAKPROOF functions to non-superuser
Date
Msg-id 2007310.1619378038@sss.pgh.pa.us
Whole thread Raw
In response to Re: Allowing to create LEAKPROOF functions to non-superuser  (Stephen Frost <sfrost@snowman.net>)
List pgsql-hackers
Stephen Frost <sfrost@snowman.net> writes:
> * Andrey Borodin (x4mmm@yandex-team.ru) wrote:
>> Customer was restoring pg_dump of on-premise ERP known as 1C (something like TurboTax) with this add-on [0]

> Erm, it's very clearly not leakproof and will happily return information
> about the value passed in during some error cases...

Yeah, that's pretty much a poster-child example for NOT letting
random users fool with leakproofness settings.

            regards, tom lane



pgsql-hackers by date:

Previous
From: Юрий Соколов
Date:
Subject: Re: [HACKERS] Cached plans and statement generalization
Next
From: Alvaro Herrera
Date:
Subject: Re: Fix dropped object handling in pg_event_trigger_ddl_commands