Postgres Pro
Downloads
Home   >   mailing lists

Re: how to remove set_config from all user - Mailing list pgsql-novice

From David G. Johnston
Subject Re: how to remove set_config from all user
Date
Msg-id CAKFQuwbmVm2j_DyvqOrGwVq=4yFbAy2VH_bXvqV-FG-KnBg+EA@mail.gmail.com
Whole thread Raw
In response to how to remove set_config from all user  (Garry Chen <gc92@cornell.edu>)
Responses RE: how to remove set_config from all user
List pgsql-novice
Tree view
On Thu, Jan 18, 2018 at 12:08 PM, Garry Chen <gc92@cornell.edu> wrote:

Hi All,

                Is there a way to revoke select set_config(‘eeee’,bb’,false) from users?  I will not to allow any user be able to the “select set_config(….)” statement.



​As a practical matter, no.  They can just do: "SET ... TO ..." to get around the function privilege denial even if worked out a usable hack.

David J.

pgsql-novice by date:

Previous
From: Garry Chen
Date:
Subject: how to remove set_config from all user
Next
From: Garry Chen
Date:
Subject: RE: how to remove set_config from all user