Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1gSewC-0004kS-9J for pgsql-admin@arkaria.postgresql.org; Fri, 30 Nov 2018 09:18:16 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1gSewA-00020Y-7d for pgsql-admin@arkaria.postgresql.org; Fri, 30 Nov 2018 09:18:14 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1gSew9-00020R-Sz for pgsql-admin@lists.postgresql.org; Fri, 30 Nov 2018 09:18:14 +0000 Received: from lungold.riddles.org.uk ([82.68.208.19]) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1gSew2-0003Y1-LN for pgsql-admin@lists.postgresql.org; Fri, 30 Nov 2018 09:18:12 +0000 Received: from [192.168.127.1] (port=15479 helo=caithnard.riddles.org.uk) by lungold.riddles.org.uk with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.88 (FreeBSD)) (envelope-from ) id 1gSevz-0000fC-N9; Fri, 30 Nov 2018 09:18:03 +0000 Received: from [127.0.0.1] (port=40001 helo=caithnard.riddles.org.uk) by caithnard.riddles.org.uk with esmtp (Exim 4.89 (FreeBSD)) (envelope-from ) id 1gSevy-000G93-Hf; Fri, 30 Nov 2018 09:18:02 +0000 From: Andrew Gierth To: prasanna rk Cc: pgsql-admin@lists.postgresql.org Subject: Re: Disable copy function In-Reply-To: (prasanna rk's message of "Fri, 30 Nov 2018 09:16:37 +0530") Message-ID: <8736rjlyfd.fsf@news-spur.riddles.org.uk> References: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.1 (berkeley-unix) Date: Fri, 30 Nov 2018 09:18:01 +0000 MIME-Version: 1.0 Content-Type: text/plain List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk >>>>> "prasanna" == prasanna rk writes: prasanna> Hi Team prasanna> How do I disable copy option from database, i understand prasanna> usually this option will be available only for super user, prasanna> however we need to disable fully from DB.. please advice Why? Notice that the superuser has other ways to read and write files (for example lo_import/lo_export, pg_read_file, using ALTER SYSTEM to change the log directory and filename, loading a module to call the OS, using file access functions in any untrusted language, etc. etc.) -- Andrew (irc:RhodiumToad)