public inbox for [email protected]
help / color / mirror / Atom feedFrom: Joe Conway <[email protected]>
To: Robert Haas <[email protected]>
Cc: Tom Lane <[email protected]>
Cc: Andrew Dunstan <[email protected]>
Cc: David Rowley <[email protected]>
Cc: PostgreSQL Hackers <[email protected]>
Subject: Re: can we mark upper/lower/textlike functions leakproof?
Date: Thu, 1 Aug 2024 10:05:44 -0400
Message-ID: <[email protected]> (raw)
In-Reply-To: <CA+TgmoZQBe9BHzMNMr3_QW_9DjDBpw-+ZQWoqVV1v0f0rrh6ug@mail.gmail.com>
References: <[email protected]>
<CAApHDvr36T+9XZYTRkHkGm82Wo5YY6wXwkRDceu2-cyGEvHzjw@mail.gmail.com>
<[email protected]>
<[email protected]>
<CA+Tgmob78LN+Tkgms=dQyBsLyGWBuehv7_kEvBfjwmj6fDsr7g@mail.gmail.com>
<[email protected]>
<[email protected]>
<CA+TgmoZhf1GzKVTnRjSefzOFvBeqFSZ1osv7WrVfw=VcrM9GDA@mail.gmail.com>
<[email protected]>
<CA+TgmoZQBe9BHzMNMr3_QW_9DjDBpw-+ZQWoqVV1v0f0rrh6ug@mail.gmail.com>
On 8/1/24 07:57, Robert Haas wrote:
> On Wed, Jul 31, 2024 at 4:42 PM Joe Conway <[email protected]> wrote:
>> You are assuming that everyone allows direct logins with the ability to
>> create procedures. Plenty don't.
>
> Well, if you can send queries, then you can do the same thing, driven
> by client-side logic.
Sure. Of course you should be monitoring your production servers for
anomalous workloads, no? "Gee, why is Joe running the same query
millions of times that keeps throwing errors? Maybe we should go see
what Joe is up to"
> If you can't directly send queries in any form, then I guess things
> are different.
Right, and there are plenty of those. I have even worked with at least
one rather large one on behalf of your employer some years ago.
> But I don't really understand what kind of system you have in mind.
Well I did say I was being hand wavy ;-)
It has been a long time since I thought deeply about this. I will try to
come back with something more concrete if no one beats me to it.
--
Joe Conway
PostgreSQL Contributors Team
RDS Open Source Databases
Amazon Web Services: https://aws.amazon.com
view thread (29+ messages) latest in thread
reply
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: [email protected]
Cc: [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]
Subject: Re: can we mark upper/lower/textlike functions leakproof?
In-Reply-To: <[email protected]>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox