Re: On login trigger: take three - Mailing list pgsql-hackers

From Andres Freund
Subject Re: On login trigger: take three
Date
Msg-id 20220314021710.b2v6s5ma7ghmjoue@alap3.anarazel.de
Whole thread Raw
In response to Re: On login trigger: take three  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-hackers
On 2022-03-13 20:35:44 -0400, Tom Lane wrote:
> Andres Freund <andres@anarazel.de> writes:
> > I was thinking that the way to use it would be to specify it as a client
> > option. Like PGOPTIONS='-c ignore_event_trigger=login' psql.
> 
> Ugh ... that would allow people (at least superusers) to bypass
> the login trigger at will, which seems to me to break a lot of
> the use-cases for the feature.  I supposed we'd want this to be a
> PGC_POSTMASTER setting for security reasons.

Shrug. This doesn't seem to add actual security to me.



pgsql-hackers by date:

Previous
From: Kyotaro Horiguchi
Date:
Subject: Re: pg_walinspect - a new extension to get raw WAL data and WAL stats
Next
From: Kyotaro Horiguchi
Date:
Subject: Re: Allow async standbys wait for sync replication