On 04/10/2012 11:36 AM, Tom Lane wrote:
> Atri Sharma<atri.jiit@gmail.com> writes:
>> On Tue, Apr 10, 2012 at 8:55 PM, Tom Lane<tgl@sss.pgh.pa.us> wrote:
>>> Hm? SPI doesn't know anything about Java either.
>> We plan to call SQL through SPI from the FDW,which in turn would call
>> the Pl/Java routine.
> If you're saying that every Java function that the FDW needs would have
> to be exposed as a SQL function, that seems like a pretty high-risk
> (not to mention low performance) approach. Not only do you have to
> design a SQL representation for every datatype you need, but you have to
> be sure that you do not have any security holes arising from
> unscrupulous users calling those SQL functions manually with arguments
> of their choosing.
>
>
Yeah. I think this design is horribly baroque and unnecessary. SPI is
for talking SQL. It's completely in the way of a straight-forward
implementation of this feature IMNSHO.
cheers
andrew
