Re: Default Roles - Mailing list pgsql-hackers

From Stephen Frost
Subject Re: Default Roles
Date
Msg-id 20150513123500.GO30322@tamriel.snowman.net
Whole thread Raw
In response to Re: Default Roles  (Heikki Linnakangas <hlinnaka@iki.fi>)
List pgsql-hackers
All,

* Heikki Linnakangas (hlinnaka@iki.fi) wrote:
> On 05/13/2015 06:07 AM, Stephen Frost wrote:
> >This does change the XLOG functions to require pg_monitor, as discussed
> >on the other thread where it was pointed out by Heikki that the XLOG
> >location information could be used to extract sensitive information
> >based on what happens during compression.
>
> That seems like an orthogonal issue, not something that should be
> bundled in this patch. IIRC we didn't reach a consensus on what to
> do about the compression-leaks-information issue. One idea was to
> make it configurable on a per-table basis, and if we do that,
> perhaps we don't need to restrict access to
> pg_current_xlog_location() and friends.

Updated patch attached which removes the changes to the XLOG location
functions and adds checks for AlterRole and RenameRole to prevent
altering or renaming the default roles.  Also adds '\duS'/'\dgS'
support to psql, to show default roles only when asked.

    Thanks!

        Stephen

Attachment

pgsql-hackers by date:

Previous
From: Robert Haas
Date:
Subject: Re: Disabling trust/ident authentication configure option
Next
From: Robert Haas
Date:
Subject: Re: Streaming replication and WAL archive interactions