public inbox for [email protected]
help / color / mirror / Atom feedFrom: Ron Johnson <[email protected]>
To: pgsql-generallists.postgresql.org <[email protected]>
Subject: Re: search_path wildcard?
Date: Wed, 22 May 2024 15:12:50 -0400
Message-ID: <CANzqJaCNkHcqJ-72qVPFuFGYt-_OArYSr6YRHPV1mtVQ1cdOpQ@mail.gmail.com> (raw)
In-Reply-To: <[email protected]>
References: <CANzqJaDxVFRPreSz_e=cg2PU2nW48BUcoJTyvc72Yry0tqkTcQ@mail.gmail.com>
<CAKFQuwZx0G=0fPDmhwWiCNT1+ZUWYQGkYVj5Vab10A0_bksq0g@mail.gmail.com>
<CANzqJaCjWr3Z3typ-Ye8vitiiYQEkCGz=w4Sx9Up7dZ+Hsb6Fw@mail.gmail.com>
<[email protected]>
On Wed, May 22, 2024 at 1:58 PM Tom Lane <[email protected]> wrote:
> Ron Johnson <[email protected]> writes:
> > That would be a helpful feature for administrators, when there are
> multiple
> > schemas in multiple databases, on multiple servers: superusers get ALTER
> > ROLE foo SET SEARCH_PATH = '*'; and they're done with it.
>
> ... and they're pwned within five minutes by any user with the wits
> to create a trojan-horse function or operator. Generally speaking,
> you want admins to run with a minimal search path not a maximal one.
>
Missing tables when running "\t" is a bigger hassle.
view thread (2+ messages)
reply
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: [email protected]
Cc: [email protected], [email protected]
Subject: Re: search_path wildcard?
In-Reply-To: <CANzqJaCNkHcqJ-72qVPFuFGYt-_OArYSr6YRHPV1mtVQ1cdOpQ@mail.gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox