Re: [v9.2] Fix Leaky View Problem - Mailing list pgsql-hackers

From Peter Geoghegan
Subject Re: [v9.2] Fix Leaky View Problem
Date
Msg-id CAEYLb_VhYLZ0c+5GqZkWYZEa10Zzarq-CNcyYguzxoBbT1gPrw@mail.gmail.com
Whole thread Raw
In response to Re: [v9.2] Fix Leaky View Problem  (Kohei KaiGai <kaigai@kaigai.gr.jp>)
List pgsql-hackers
On 10 October 2011 21:28, Kohei KaiGai <kaigai@kaigai.gr.jp> wrote:
> 2011/10/10 Robert Haas <robertmhaas@gmail.com>:
>> It seems really ugly to me to suppose that we need to add a depth
>> field to every single one of these node types.  If you've missed one,
>> then we have a security hole.  If someone else adds another node type
>> later that requires this field and doesn't add it, we have a security
>> hole.  And since all of these depth fields are going to make their way
>> into stored rules, those security holes will require an initdb to fix.
>>
> Indeed, I have to admit this disadvantage from the perspective of code
> maintenance, because it had also been a tough work for me to track
> the depth field in this patch.

Would you consider putting the depth field directly into a generic
superclass node, such as the "Expr" node? Perhaps that approach would
be neater.

--
Peter Geoghegan       http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Training and Services


pgsql-hackers by date:

Previous
From: Noah Misch
Date:
Subject: Re: [v9.2] Fix Leaky View Problem
Next
From: Josh Berkus
Date:
Subject: Dumping roles improvements?