Hi All,
I just realized that anyone can listen for notifications (using listen)
so long as they know the "channel" name. This means that a user could
receive and view the payload for another user.
Perhaps it would be good to note this in the documentation (i.e., there
should be no expectation of privacy/security when using listen/notify,
so any user that can connect to a database could issue and receive
notifications for any channel.)
thanks
--
Chander Ganesan
Open Technology Group, Inc.
11010 Lake Grove Blvd Ste. 100-307
Morrisville, NC 27560
919-463-0999/877-258-8987
http://www.otg-nc.com
