Re: search_path wildcard? - Mailing list pgsql-general

From Tom Lane
Subject Re: search_path wildcard?
Date
Msg-id 4178924.1716400730@sss.pgh.pa.us
Whole thread Raw
In response to Re: search_path wildcard?  (Ron Johnson <ronljohnsonjr@gmail.com>)
Responses Re: search_path wildcard?
List pgsql-general
Ron Johnson <ronljohnsonjr@gmail.com> writes:
> That would be a helpful feature for administrators, when there are multiple
> schemas in multiple databases, on multiple servers: superusers get ALTER
> ROLE foo SET SEARCH_PATH  = '*'; and they're done with it.

... and they're pwned within five minutes by any user with the wits
to create a trojan-horse function or operator.  Generally speaking,
you want admins to run with a minimal search path not a maximal one.

            regards, tom lane



pgsql-general by date:

Previous
From: Ron Johnson
Date:
Subject: Re: search_path wildcard?
Next
From: Isaac Morland
Date:
Subject: Re: search_path and SET ROLE