MIME-Version: 1.0
References: <CANzqJaDxVFRPreSz_e=cg2PU2nW48BUcoJTyvc72Yry0tqkTcQ@mail.gmail.com>
 <CAKFQuwZx0G=0fPDmhwWiCNT1+ZUWYQGkYVj5Vab10A0_bksq0g@mail.gmail.com>
 <CANzqJaCjWr3Z3typ-Ye8vitiiYQEkCGz=w4Sx9Up7dZ+Hsb6Fw@mail.gmail.com>
 <4178924.1716400730@sss.pgh.pa.us> <CANzqJaCNkHcqJ-72qVPFuFGYt-_OArYSr6YRHPV1mtVQ1cdOpQ@mail.gmail.com>
In-Reply-To: <CANzqJaCNkHcqJ-72qVPFuFGYt-_OArYSr6YRHPV1mtVQ1cdOpQ@mail.gmail.com>
From: Pavel Stehule <pavel.stehule@gmail.com>
Date: Wed, 22 May 2024 21:38:35 +0200
Message-ID: <CAFj8pRC9_kM_FtQJR4+q2jXH4RqAMUy4Ji=_Fegse+g3tzYzsA@mail.gmail.com>
Subject: Re: search_path wildcard?
To: Ron Johnson <ronljohnsonjr@gmail.com>
Cc: "pgsql-generallists.postgresql.org" <pgsql-general@lists.postgresql.org>
Content-Type: multipart/alternative; boundary="000000000000c0095c06191016f6"
Archived-At: <https://www.postgresql.org/message-id/CAFj8pRC9_kM_FtQJR4%2Bq2jXH4RqAMUy4Ji%3D_Fegse%2Bg3tzYzsA%40mail.gmail.com>
Precedence: bulk

--000000000000c0095c06191016f6
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

st 22. 5. 2024 v 21:13 odes=C3=ADlatel Ron Johnson <ronljohnsonjr@gmail.com=
>
napsal:

> On Wed, May 22, 2024 at 1:58=E2=80=AFPM Tom Lane <tgl@sss.pgh.pa.us> wrot=
e:
>
>> Ron Johnson <ronljohnsonjr@gmail.com> writes:
>> > That would be a helpful feature for administrators, when there are
>> multiple
>> > schemas in multiple databases, on multiple servers: superusers get ALT=
ER
>> > ROLE foo SET SEARCH_PATH  =3D '*'; and they're done with it.
>>
>> ... and they're pwned within five minutes by any user with the wits
>> to create a trojan-horse function or operator.  Generally speaking,
>> you want admins to run with a minimal search path not a maximal one.
>>
>
> Missing tables when running "\t" is a bigger hassle.
>

what is hard on \dt *.*

or you can define own

 dtall =3D '\\dt *.*'

:dtall

The problem is not on search path, but maybe on design backslash commands -
but there should be some level of consistency

Regards

Pavel

--000000000000c0095c06191016f6
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><br></div><br><div class=3D"gmail_quote">=
<div dir=3D"ltr" class=3D"gmail_attr">st 22. 5. 2024 v=C2=A021:13 odes=C3=
=ADlatel Ron Johnson &lt;<a href=3D"mailto:ronljohnsonjr@gmail.com">ronljoh=
nsonjr@gmail.com</a>&gt; napsal:<br></div><blockquote class=3D"gmail_quote"=
 style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);p=
adding-left:1ex"><div dir=3D"ltr"><div dir=3D"ltr">On Wed, May 22, 2024 at =
1:58=E2=80=AFPM Tom Lane &lt;<a href=3D"mailto:tgl@sss.pgh.pa.us" target=3D=
"_blank">tgl@sss.pgh.pa.us</a>&gt; wrote:<br></div><div class=3D"gmail_quot=
e"><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;bord=
er-left:1px solid rgb(204,204,204);padding-left:1ex">Ron Johnson &lt;<a hre=
f=3D"mailto:ronljohnsonjr@gmail.com" target=3D"_blank">ronljohnsonjr@gmail.=
com</a>&gt; writes:<br>
&gt; That would be a helpful feature for administrators, when there are mul=
tiple<br>
&gt; schemas in multiple databases, on multiple servers: superusers get ALT=
ER<br>
&gt; ROLE foo SET SEARCH_PATH=C2=A0 =3D &#39;*&#39;; and they&#39;re done w=
ith it.<br>
<br>
... and they&#39;re pwned within five minutes by any user with the wits<br>
to create a trojan-horse function or operator.=C2=A0 Generally speaking,<br=
>
you want admins to run with a minimal search path not a maximal one.<br></b=
lockquote><div>=C2=A0</div><div>Missing tables when running &quot;\t&quot; =
is a bigger hassle.</div></div></div></blockquote><div><br></div><div>what =
is hard on \dt *.*</div><div><br></div><div>or you can define own=C2=A0</di=
v><div><br></div><div>=C2=A0dtall =3D &#39;\\dt *.*&#39;</div><div><br></di=
v><div>:dtall</div><div><br></div><div>The problem is not on search path, b=
ut maybe on design backslash commands - but there should be some level of c=
onsistency</div><div><br></div><div>Regards</div><div><br></div><div>Pavel<=
br></div></div></div>

--000000000000c0095c06191016f6--