Re: [Review] fix dblink security hole - Mailing list pgsql-hackers

From Ibrar Ahmed
Subject Re: [Review] fix dblink security hole
Date
Msg-id 8494ccf60809160527v153eac19rc6d9ca1fef6623f@mail.gmail.com
Whole thread Raw
In response to Re: [Review] fix dblink security hole  ("Marko Kreen" <markokr@gmail.com>)
List pgsql-hackers

> I have attached a patch just for the quick thought. Otherwise there is no
> issue with patch.

This is no good - the security_check() needs established connection
to work on.

I know it but after putting the superuser check just above the security_check function make this function almost useless and now it doesn't need PGconn parameter.  


BTW it was just my suggestion otherwise patch looks ok to me


--
Ibrar Ahmed


pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: Coping with nLocks overflow
Next
From: Heikki Linnakangas
Date:
Subject: Re: WIP patch: Collation support