public inbox for [email protected]  

help / color / mirror / Atom feed
From: Andreas Joseph Krogh <[email protected]>
To: Greg Sabino Mullane <[email protected]>
Cc: Tom Lane <[email protected]>
Cc: [email protected]
Subject: Re: Effects of REVOKE SELECT ON ALL TABLES IN SCHEMA pg_catalog FROM PUBLIC
Date: Thu, 12 Sep 2024 15:21:49 +0200 (CEST)
Message-ID: <VisenaEmail.21.e9d63efdf68bfe51.191e663ceda@origo-test01.app.internal.visena.net> (raw)
In-Reply-To: <CAKAnmm+SrS1=ggcc9qCAXd=uzJWzwH_CciM+aRr-PtDZjrEuRA@mail.gmail.com>
References: <VisenaEmail.0.81936c517b2d9cfe.191e44de951@origo-test01.app.internal.visena.net>
	<[email protected]>
	<VisenaEmail.1.4f10ceb0099d6ab1.191e48a6946@origo-test01.app.internal.visena.net>
	<CAKAnmm+SrS1=ggcc9qCAXd=uzJWzwH_CciM+aRr-PtDZjrEuRA@mail.gmail.com>



På torsdag 12. september 2024 kl. 15:05:48, skrev Greg Sabino Mullane <
[email protected] <mailto:[email protected]>>:

On Thu, Sep 12, 2024 at 12:52 AM Andreas Joseph Krogh <[email protected] 
<mailto:[email protected]>> wrote:

I know PG is not designed for this, but I have this requirement nonetheless…
I think preventing “most users and tools" from seeing/presenting this 
information is “good enough”.



As pointed out, there are very many workarounds. This is security theater.


Yes, it is theater, but that doesn't prevent “compliance people” to care about 
it. We have to take measures to prevent “information leaks”.






--
Andreas Joseph Krogh
CTO / Partner - Visena AS
Mobile: +47 909 56 963
[email protected] <mailto:[email protected]>
www.visena.com <https://www.visena.com;
 <https://www.visena.com;


view thread (7+ messages)  latest in thread

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected], [email protected], [email protected]
  Subject: Re: Effects of REVOKE SELECT ON ALL TABLES IN SCHEMA pg_catalog FROM PUBLIC
  In-Reply-To: <VisenaEmail.21.e9d63efdf68bfe51.191e663ceda@origo-test01.app.internal.visena.net>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox