public inbox for [email protected]
help / color / mirror / Atom feedFrom: Tom Lane <[email protected]>
To: Ron Johnson <[email protected]>
Cc: pgsql-general <[email protected]>
Subject: Re: search_path wildcard?
Date: Wed, 22 May 2024 13:58:50 -0400
Message-ID: <[email protected]> (raw)
In-Reply-To: <CANzqJaCjWr3Z3typ-Ye8vitiiYQEkCGz=w4Sx9Up7dZ+Hsb6Fw@mail.gmail.com>
References: <CANzqJaDxVFRPreSz_e=cg2PU2nW48BUcoJTyvc72Yry0tqkTcQ@mail.gmail.com>
<CAKFQuwZx0G=0fPDmhwWiCNT1+ZUWYQGkYVj5Vab10A0_bksq0g@mail.gmail.com>
<CANzqJaCjWr3Z3typ-Ye8vitiiYQEkCGz=w4Sx9Up7dZ+Hsb6Fw@mail.gmail.com>
Ron Johnson <[email protected]> writes:
> That would be a helpful feature for administrators, when there are multiple
> schemas in multiple databases, on multiple servers: superusers get ALTER
> ROLE foo SET SEARCH_PATH = '*'; and they're done with it.
... and they're pwned within five minutes by any user with the wits
to create a trojan-horse function or operator. Generally speaking,
you want admins to run with a minimal search path not a maximal one.
regards, tom lane
view thread (2+ messages) latest in thread
reply
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: [email protected]
Cc: [email protected], [email protected]
Subject: Re: search_path wildcard?
In-Reply-To: <[email protected]>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox