Re: search_path wildcard? - Mailing list pgsql-general

From Ron Johnson
Subject Re: search_path wildcard?
Date
Msg-id CANzqJaCNkHcqJ-72qVPFuFGYt-_OArYSr6YRHPV1mtVQ1cdOpQ@mail.gmail.com
Whole thread Raw
In response to Re: search_path wildcard?  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: search_path wildcard?
List pgsql-general
On Wed, May 22, 2024 at 1:58 PM Tom Lane <tgl@sss.pgh.pa.us> wrote:
Ron Johnson <ronljohnsonjr@gmail.com> writes:
> That would be a helpful feature for administrators, when there are multiple
> schemas in multiple databases, on multiple servers: superusers get ALTER
> ROLE foo SET SEARCH_PATH  = '*'; and they're done with it.

... and they're pwned within five minutes by any user with the wits
to create a trojan-horse function or operator.  Generally speaking,
you want admins to run with a minimal search path not a maximal one.
 
Missing tables when running "\t" is a bigger hassle.

pgsql-general by date:

Previous
From: Daniel Gustafsson
Date:
Subject: Re: Missed compiler optimization issue in function select_rtable_names_for_explain
Next
From: Pavel Stehule
Date:
Subject: Re: search_path wildcard?