Date: Tue, 20 Dec 2016 18:14:40 -0500
From: Stephen Frost <sfrost@snowman.net>
To: David Fetter <david@fetter.org>
Cc: Heikki Linnakangas <hlinnaka@iki.fi>,
	Robert Haas <robertmhaas@gmail.com>,
	Peter Eisentraut <peter.eisentraut@2ndquadrant.com>,
	Michael Paquier <michael.paquier@gmail.com>,
	Andres Freund <andres@anarazel.de>,
	David Steele <david@pgmasters.net>, Tom Lane <tgl@sss.pgh.pa.us>,
	Alvaro Herrera <alvherre@2ndquadrant.com>,
	Magnus Hagander <magnus@hagander.net>,
	Julian Markwort <julian.markwort@uni-muenster.de>,
	PostgreSQL mailing lists <pgsql-hackers@postgresql.org>,
	Valery Popov <v.popov@postgrespro.ru>
Subject: Re: pg_authid.rolpassword format (was Re: Password
 identifiers, protocol aging and SCRAM protocol)
Message-ID: <20161220231439.GA18360@tamriel.snowman.net>
References: <2d07165c-1793-e243-a2a9-e45b624c7580@iki.fi>
 <CAB7nPqQ28o6ocOdbidOVmxxcKDMP=woZ=hvAVHKKAjAUtjZNyQ@mail.gmail.com>
 <ce051da1-cc5a-2a06-a9a8-6a4d0d98bdd1@2ndquadrant.com>
 <20161214145723.GJ23417@tamriel.snowman.net>
 <9dc32483-b24a-5832-53e0-fb62838f1315@iki.fi>
 <20161215134030.GI23417@tamriel.snowman.net>
 <CA+TgmoaRtNXf37AfLvhMMsoEP9LdvAvhSOoSm2nDHF72aqdiww@mail.gmail.com>
 <5ec22c98-16b9-4d13-a551-9aa46d8f1269@iki.fi>
 <20161220133419.GX18360@tamriel.snowman.net>
 <20161220160801.GA7806@fetter.org>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="fGPQ8TN6VVAOY/Hs"
Content-Disposition: inline
In-Reply-To: <20161220160801.GA7806@fetter.org>
User-Agent: Mutt/1.5.21 (2010-09-15)
Precedence: bulk
Sender: pgsql-hackers-owner@postgresql.org


--fGPQ8TN6VVAOY/Hs
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

David,

* David Fetter (david@fetter.org) wrote:
> On Tue, Dec 20, 2016 at 08:34:19AM -0500, Stephen Frost wrote:
> > * Heikki Linnakangas (hlinnaka@iki.fi) wrote:
> > > Even if you have a separate "verifier type" column, it's not fully
> > > normalized, because there's still a dependency between the
> > > verifier and verifier type columns. You will always need to look
> > > at the verifier type to make sense of the verifier itself.
> >=20
> > That's true- but you don't need to look at the verifier, or even
> > have *access* to the verifier, to look at the verifier type.
>=20
> Would a view that shows only what's to the left of the first semicolon
> suit this purpose?

Obviously a (security barrier...) view or a (security definer) function
could be used, but I don't believe either is actually a good idea.

Thanks!

Stephen

--fGPQ8TN6VVAOY/Hs
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=qZre
-----END PGP SIGNATURE-----

--fGPQ8TN6VVAOY/Hs--