Postgres Pro
Downloads
Home   >   mailing lists

Re: Add on_trusted_init and on_untrusted_init to plperl [PATCH] - Mailing list pgsql-hackers

From Andrew Dunstan
Subject Re: Add on_trusted_init and on_untrusted_init to plperl [PATCH]
Date
Msg-id 4B61C339.4060607@dunslane.net
Whole thread Raw
In response to Re: Add on_trusted_init and on_untrusted_init to plperl [PATCH]  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: Add on_trusted_init and on_untrusted_init to plperl [PATCH]  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-hackers
Tree view 

Tom Lane wrote:
>
> Isn't it a security hole if on_trusted_init is USERSET?  That means
> an unprivileged user can determine what will happen in plperlu.
> SUSET would be saner.
>   

ITYM on_untrusted_init.

cheers

andrew

pgsql-hackers by date:

Previous
From: Pavel Stehule
Date:
Subject: Re: quoting psql varible as identifier
Next
From: Hitoshi Harada
Date:
Subject: Re: Review: listagg aggregate