From: Stephen Frost <sfrost@snowman.net>
To: David G. Johnston <david.g.johnston@gmail.com>
Cc: Swanand Kshirsagar <swanandon@gmail.com>
Cc: pgsql-admin@lists.postgresql.org <pgsql-admin@lists.postgresql.org>
Subject: Re: Restrict permissions on schema to hide pl/pgsql code
Date: Wed, 24 Jul 2019 13:15:10 -0400
Message-ID: <20190724171510.GD29202@tamriel.snowman.net> (raw)
In-Reply-To: <CAKFQuwak90CZEsyuCqGeibmRsH-9pzer8O086mzgomdGtF-TSA@mail.gmail.com>
References: <CAMn6ZARbP+r=AdDpFG1xC217=+mMVOsqnVBLL4Pf+ktDJt33gA@mail.gmail.com>
<CAKFQuwasburx+UXm9Do9CFVRKFtET=US2zrYnrJcGW9aob5xrg@mail.gmail.com>
<CAMn6ZASyECgGPn1TtPnimgBXjFY--=Ay7SYFouvVG4PV3NSrJQ@mail.gmail.com>
<CAKFQuwak90CZEsyuCqGeibmRsH-9pzer8O086mzgomdGtF-TSA@mail.gmail.com>
Greetings,
* David G. Johnston (david.g.johnston@gmail.com) wrote:
> You can consider this email to have accomplished both. Lacking someone
> saying they they are working on it and pointing you to a patch you can
> safely operate under the assumption that this behavior isn’t going to
> change. I suppose its possible with the recent row-level security feature
> that a fresh look leveraging that facility could be considered but AFAIK
> that hasn’t and isn’t being done.
Actually, there was work specifically around that which it'd be nice if
someone had time to pick up and work on.
https://www.postgresql.org/message-id/CAJrrPGdCZEVxQTs49CqxjjyffHKPFtff+sa6c6f5Z5grXztodw@mail.gmail...
One of the big questions around that is how much good is it to limit
access when the catalog tables are queried directly when you can gather
information about what's in them in other ways that we wouldn't want to
be running through RLS (such as when we do direct catalog accesses as
part of some DDL or such). That's a similar trade-off that application
designers have to deal with when using RLS (eg: primary key violations
could 'leak' the knowledge that a particular value exists even if you
can't see it) and in many cases it's acceptable.
Thanks,
Stephen
Attachments:
signature.asc (application/pgp-signature, 818B) download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: sfrost@snowman.net, david.g.johnston@gmail.com, swanandon@gmail.com, pgsql-admin@lists.postgresql.org
Subject: Re: Restrict permissions on schema to hide pl/pgsql code
In-Reply-To: <20190724171510.GD29202@tamriel.snowman.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox