Re: [HACKERS] proposal: session server side variables - Mailing list pgsql-hackers

From Fabien COELHO
Subject Re: [HACKERS] proposal: session server side variables
Date
Msg-id alpine.DEB.2.20.1612281523420.4911@lancre
Whole thread Raw
In response to Re: [HACKERS] proposal: session server side variables  (Craig Ringer <craig@2ndquadrant.com>)
List pgsql-hackers
>> Also, I'm not yet convinced that simple privatizable transcient/session
>> variables would not be enough to fit the use case, [...]

> So... maybe? The main question then becomes how you integrate access control.

For what it's worth, permissions on persistent functions could be used to 
control access to private-to-a-role transcient/session variables, see:

https://www.mail-archive.com/pgsql-hackers@postgresql.org/msg300651.html

The good point is that the implementation on top of session variables 
would be trivial and very efficient, just prefix the variable with the 
owner id in the key-value storage. The bad point is that there is no 
full-featured GRANT on the variable itself, and it looks adhoc, somehow.

-- 
Fabien.



pgsql-hackers by date:

Previous
From: Peter Eisentraut
Date:
Subject: [HACKERS] make more use of RoleSpec struct
Next
From: Fabien COELHO
Date:
Subject: Re: [HACKERS] proposal: session server side variables