Atri Sharma <atri.jiit@gmail.com> writes:
> On Tue, Apr 10, 2012 at 8:55 PM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
>> Hm? SPI doesn't know anything about Java either.
> We plan to call SQL through SPI from the FDW,which in turn would call
> the Pl/Java routine.
If you're saying that every Java function that the FDW needs would have
to be exposed as a SQL function, that seems like a pretty high-risk
(not to mention low performance) approach. Not only do you have to
design a SQL representation for every datatype you need, but you have to
be sure that you do not have any security holes arising from
unscrupulous users calling those SQL functions manually with arguments
of their choosing.
regards, tom lane
