Re: Anonymous code block with parameters - Mailing list pgsql-hackers

From Martijn van Oosterhout
Subject Re: Anonymous code block with parameters
Date
Msg-id 20140918113531.GB24527@svana.org
Whole thread Raw
In response to Re: Anonymous code block with parameters  (Pavel Stehule <pavel.stehule@gmail.com>)
Responses Re: Anonymous code block with parameters
List pgsql-hackers
On Wed, Sep 17, 2014 at 10:17:22PM +0200, Pavel Stehule wrote:
> > Because you still have to do
> >
> >     SELECT pg_temp.my_temp_function(blah);
> >
> > to execute it.
> >
>
> this problem should be solvable. I can to use a temporary tables without
> using pg_temp schema.

Umm, IIRC it used to work that way but was changed to work like this.
IIRC the reason was that anyone can create functions in the temp
tablespace and thus hijack other functions that more priviledged
functions might call.

Or something like that. I think it was even a CVE.

Have a nice dat,
--
Martijn van Oosterhout   <kleptog@svana.org>   http://svana.org/kleptog/
> He who writes carelessly confesses thereby at the very outset that he does
> not attach much importance to his own thoughts.  -- Arthur Schopenhauer

pgsql-hackers by date:

Previous
From: Martijn van Oosterhout
Date:
Subject: Re: Collations and Replication; Next Steps
Next
From: Andres Freund
Date:
Subject: Re: Anonymous code block with parameters