On 1/6/06, Bruce Momjian <pgman@candle.pha.pa.us> wrote:
> Bruno Wolff III wrote:
> > It might be nice to split nextval and currval access as well. nextval access
> > corresponds to INSERT and currval access to SELECT.
>
> Uh, that is already in the code. nextval()/setval() is UPDATE, and
> currval() is SELECT.
This seems weird. Shouldn't nextval/currval go together and setval
separately?
Considering there's no currval() without nextval(), what point
is disallowing currval() when user is able to call nextval()?
I rather want to allow nextval/currval and disable setval as it
allows regular user to DoS the database.
--
marko
[removing Tom from CC as he bounces gmail]
