Re: dblink vs SQL/MED - security and implementation details - Mailing list pgsql-hackers

From Tom Lane
Subject Re: dblink vs SQL/MED - security and implementation details
Date
Msg-id 8646.1231264251@sss.pgh.pa.us
Whole thread Raw
In response to Re: dblink vs SQL/MED - security and implementation details  (Peter Eisentraut <peter_e@gmx.net>)
Responses Re: dblink vs SQL/MED - security and implementation details  (Peter Eisentraut <peter_e@gmx.net>)
Re: dblink vs SQL/MED - security and implementation details  (Martin Pihlak <martin.pihlak@gmail.com>)
List pgsql-hackers
Peter Eisentraut <peter_e@gmx.net> writes:
> I think you want some permission checking on fdtest then, right?

What about the permissions on the system catalogs themselves?
AFAICT, the pg_user_mappings view will expose user passwords to
the "owner" of the foreign server, which doesn't seem good.
        regards, tom lane


pgsql-hackers by date:

Previous
From: Peter Eisentraut
Date:
Subject: Re: dblink vs SQL/MED - security and implementation details
Next
From: Bruce Momjian
Date:
Subject: Re: Warning about the 8.4 release