Postgres Pro
Downloads
Home   >   mailing lists

Re: system variable can be edited by all user? - Mailing list pgsql-general

From Laurenz Albe
Subject Re: system variable can be edited by all user?
Date
Msg-id 41929232f76a097959fff8e189515ba86b94ccce.camel@cybertec.at
Whole thread Raw
In response to system variable can be edited by all user?  (chris navarroza <canavarroza.work@gmail.com>)
List pgsql-general
Tree view 
On Tue, 2022-11-22 at 14:25 +0800, chris navarroza wrote:
> Ive created a read only user (SELECT PRIVILEGE) but it turns out that this user
> can do this queries: SHOW work_mem; SET work_mem='40MB'; How do I limit him?

We call these "configuration parameters", and there is no way you can prevent
a database user from changing them for her session.  The recommendation is not
to give untrustworthy users access to directly run SQL statements on the database.

Yours,
Laurenz Albe

pgsql-general by date:

Previous
From: chris navarroza
Date:
Subject: system variable can be edited by all user?
Next
From: Alastair McKinley
Date:
Subject: copying json data and backslashes