Postgres Pro
Downloads
Home   >   mailing lists

Re: Allowing to create LEAKPROOF functions to non-superuser - Mailing list pgsql-hackers

From Tom Lane
Subject Re: Allowing to create LEAKPROOF functions to non-superuser
Date
Msg-id 3043049.1618259821@sss.pgh.pa.us
Whole thread Raw
In response to Allowing to create LEAKPROOF functions to non-superuser  (Andrey Borodin <x4mmm@yandex-team.ru>)
Responses Re: Allowing to create LEAKPROOF functions to non-superuser  (Tomas Vondra <tomas.vondra@enterprisedb.com>)
Re: Allowing to create LEAKPROOF functions to non-superuser  (Andrey Borodin <x4mmm@yandex-team.ru>)
Re: Allowing to create LEAKPROOF functions to non-superuser  (Andres Freund <andres@anarazel.de>)
List pgsql-hackers
Tree view 
Andrey Borodin <x4mmm@yandex-team.ru> writes:
> Currently only superuser is allowed to create LEAKPROOF functions because leakproof functions can see tuples which
havenot yet been filtered out by security barrier views or row level security policies. 

Yeah.

> But managed cloud services typically do not provide superuser roles.

This is not a good argument for relaxing superuser requirements.

            regards, tom lane

pgsql-hackers by date:

Previous
From: Andrey Borodin
Date:
Subject: Allowing to create LEAKPROOF functions to non-superuser
Next
From: Andres Freund
Date:
Subject: Re: PANIC: wrong buffer passed to visibilitymap_clear