Re: Multivariate MCV stats can leak data to unprivileged users - Mailing list pgsql-hackers

From Andres Freund
Subject Re: Multivariate MCV stats can leak data to unprivileged users
Date
Msg-id 20190517202938.lkx6q2u6woiptrsa@alap3.anarazel.de
Whole thread Raw
In response to Re: Multivariate MCV stats can leak data to unprivileged users  (Dean Rasheed <dean.a.rasheed@gmail.com>)
Responses Re: Multivariate MCV stats can leak data to unprivileged users  (Dean Rasheed <dean.a.rasheed@gmail.com>)
List pgsql-hackers
Hi,

On 2019-05-16 14:28:03 +0100, Dean Rasheed wrote:
> 5). Some columns from pg_statistic_ext have to be made visible for
> psql \d to work. Basically, it needs to be able to query for the
> existence of extended statistics, but it doesn't need to see the
> actual statistical data. Of course, we could change psql to use the
> view, but this way gives us better backwards compatibility with older
> clients.
> 
> This is still going to break compatibility of any user code looking at
> stxndistinct or stxdependencies from pg_statistic_ext, but at least it
> doesn't break old versions of psql.

Hm, it's not normally a goal to keep old psql working against new
postgres versions. And there's plenty other issues preventing a v11 psql
to work against 12. I'd not let this guide any design decisions.


Greetings,

Andres Freund



pgsql-hackers by date:

Previous
From: Andres Freund
Date:
Subject: Re: vacuumdb and new VACUUM options
Next
From: Tom Lane
Date:
Subject: Re: hyrax vs. RelationBuildPartitionDesc