Re: Isn't pg_statistic a security hole? - Mailing list pgsql-hackers

From Tom Lane
Subject Re: Isn't pg_statistic a security hole?
Date
Msg-id 28851.989170051@sss.pgh.pa.us
Whole thread Raw
In response to Re: Isn't pg_statistic a security hole?  ("Serguei Mokhov" <sa_mokho@alcor.concordia.ca>)
Responses Re: Isn't pg_statistic a security hole?  (Stephan Szabo <sszabo@megazone23.bigpanda.com>)
Re: Isn't pg_statistic a security hole?  (Jan Wieck <JanWieck@Yahoo.com>)
List pgsql-hackers
"Serguei Mokhov" <sa_mokho@alcor.concordia.ca> writes:
> Being a simple user, I still want to view the stats from the table,
> but it should be limited only to the stuff I own. I don't wanna let
> others see any of my info, however.  The SU's, of course, should be
> able to read all the stats.

This is infeasible since we don't have a concept of per-row permissions.
It's all or nothing.
        regards, tom lane


pgsql-hackers by date:

Previous
From: "Serguei Mokhov"
Date:
Subject: Re: Isn't pg_statistic a security hole?
Next
From: Lincoln Yeoh
Date:
Subject: Re: Re: New Linux xfs/reiser file systems