DBLink's default user: postgres - Mailing list pgsql-hackers

From Rodrigo Hjort
Subject DBLink's default user: postgres
Date
Msg-id 731083980710170607hb7b4931h198d1b73b67f1f20@mail.gmail.com
Whole thread Raw
Responses Re: DBLink's default user: postgres
List pgsql-hackers
Is this the regular behavior on DBLink?<br /><br />rot=> SELECT user, current_database();<br /> current_user |
current_database<br/>--------------+------------------<br /> sa_rot       | rot<br />(1 registro)<br /><br />rot=>
SELECT* <br />rot-> FROM dblink('dbname=escola',<br />rot(> 'SELECT user, current_database()')<br />rot-> AS
(usrname, db name);<br />   usr    |   db<br />----------+--------<br /> postgres | escola<br />(1 registro) <br /><br
/>Thisway, I fear DBLink functions should become a vulnerability issue on my database.<br />Is there any way to protect
oroverride this setting? Or it should be done on pg_hba.conf only?<br clear="all" /><br />-- <br />Regards, <br /><br
/>RodrigoHjort<br /><a href="http://icewall.org/~hjort">http://icewall.org/~hjort</a><br /><br /> 

pgsql-hackers by date:

Previous
From: "Florian G. Pflug"
Date:
Subject: Re: Why copy_relation_data only use wal when WALarchiving is enabled
Next
From: Simon Riggs
Date:
Subject: Re: Why copy_relation_data only use wal when WALarchiving is enabled