Peter Eisentraut <peter_e@gmx.net> writes:
> Jean-Michel POURE writes:
>> It is sometimes tricky for Windows users to install a language remotely on
>> a Linux box (no access to createlang and/or no knowledge of handlers).
> Why not run createlang on the host that the server runs on?
I wasn't able to get excited about that argument either.
I believe the primary reason why PL languages aren't installed by
default is security considerations: users can easily create denial-of-
service conditions if given access to a PL. (Example: write infinitely
recursive function, invoke it to cause stack overflow crash in your
backend, which forces database-wide restart, thereby negating other
people's transactions. Repeat until DBA kicks you off...)
A DBA who does want to give access to PL languages by default can
easily do so by installing them into template1, whence they'll be
automatically duplicated into newly created databases. Perhaps this
option needs to be documented more prominently.
regards, tom lane
