Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1gSfBn-0005qc-VY for pgsql-admin@arkaria.postgresql.org; Fri, 30 Nov 2018 09:34:24 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1gSfBm-0006SN-Gc for pgsql-admin@arkaria.postgresql.org; Fri, 30 Nov 2018 09:34:22 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1gSfBm-0006SF-3Q for pgsql-admin@lists.postgresql.org; Fri, 30 Nov 2018 09:34:22 +0000 Received: from mail-ot1-x32d.google.com ([2607:f8b0:4864:20::32d]) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1gSfBf-0003sA-Fe for pgsql-admin@lists.postgresql.org; Fri, 30 Nov 2018 09:34:20 +0000 Received: by mail-ot1-x32d.google.com with SMTP id 81so4564548otj.2 for ; Fri, 30 Nov 2018 01:34:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-transfer-encoding:content-language; bh=l2sAdXjk3GbJZsfOXWnhD7WVOxoKqLGu3vnjUBhBmgE=; b=uRUGn6w7zPEp1OWOKvEruynBlWq8IkSw5KjNNxCin7lJoeTbNgiKitHAfJkkMzJkpy XPa4d8fnwlKfCvtq+nFwFMpVQ8tEvuWFrYGjTUWuziEQcs8a61R+CrGMlx/p5N5iiG9X +EIT8SCK3u2n1MRphVTSJLgmDh4fridOH/Ezn9ZW6bT0EpzoHa1Fe5XnXUvH/yTUuUwk syApVa7a4t18Sm7Ffj63ydKImP3/djeFydZ47gCnO3GVokpoiuHFF3xTvh/2k7hRKFFM v3TS8cGffqURIGhabMOb69ZqNdUazWWj4CIi8dpXnJlt1et2KSj6yUmLJMK6Fyfk9y/s 0kiQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding :content-language; bh=l2sAdXjk3GbJZsfOXWnhD7WVOxoKqLGu3vnjUBhBmgE=; b=lheJ44oFD26YHP8bhAisZzFJYY79ewB3mxuKp2Sh7LxhkNX/2FGpjunH9/yPW+Itn8 2YtumhHaG8h0GY9W6Ax9fdaM//aRSnxgFC14UJFOxxZnoeRoAy8jZV6DAP2JDmtwzBrp MSNA75dnjyIoXUW+WFANpqBm4SzsdNpooQV+u3utcZAKXVU3wVS40DkXrJvQ5HZKqEcS TLIKi5fDLWE0iHS0WZ3a3/JNfUW1jP37z/yIAODhtxvqm/TLPVHZHLBybb4y1+LFocL0 BOE6o1sNQVO7IEhKbx3OU0Lir6BR60ueKA0ktNLGG6Z+mlYoj9oSsWF1Y7DJPGM0Snda ZhiA== X-Gm-Message-State: AA+aEWb0krN1bwnjrDHbgNSbU22U3CcPmdIlXhsNaocQStw5Guxf3mlO P/Z7YDZKxP1HmYCaRfrvJc8qMHM/ X-Google-Smtp-Source: AFSGD/UiwSrjPylFx0Qam4ZsYb2D6ApVDZxINCVTB/clSKKat7Vduq+svwblSR4lzfNaSv66vRAFhg== X-Received: by 2002:a05:6830:1004:: with SMTP id a4mr3010105otp.254.1543570453967; Fri, 30 Nov 2018 01:34:13 -0800 (PST) Received: from [192.168.1.10] (ip70-171-116-89.no.no.cox.net. [70.171.116.89]) by smtp.googlemail.com with ESMTPSA id z94sm2808409ota.58.2018.11.30.01.34.12 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 30 Nov 2018 01:34:13 -0800 (PST) Subject: Re: Disable copy function To: pgsql-admin@lists.postgresql.org References: <8736rjlyfd.fsf@news-spur.riddles.org.uk> From: Ron Message-ID: Date: Fri, 30 Nov 2018 03:34:12 -0600 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <8736rjlyfd.fsf@news-spur.riddles.org.uk> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk On 11/30/2018 03:18 AM, Andrew Gierth wrote: >>>>>> "prasanna" == prasanna rk writes: > prasanna> Hi Team > prasanna> How do I disable copy option from database, i understand > prasanna> usually this option will be available only for super user, > prasanna> however we need to disable fully from DB.. please advice > > Why? ISTM that a lot of people on this list have never worked in large companies run by unimaginative people who only know "Best Practice".   This crazy question smells of that: OP has been tasked with blocking COPY or coming back with an authoritative document saying why it can't be done. > Notice that the superuser has other ways to read and write files (for > example lo_import/lo_export, pg_read_file, using ALTER SYSTEM to > change the log directory and filename, loading a module to call the OS, > using file access functions in any untrusted language, etc. etc.) -- Angular momentum makes the world go 'round.