pg.ddx.io  pgsql-hackers@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Stephen Frost <sfrost@snowman.net>
To: Robert Haas <robertmhaas@gmail.com>
Cc: Dave Page <dpage@pgadmin.org>
Cc: Mark Dilger <hornschnorter@gmail.com>
Cc: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Cc: PostgreSQL Hackers <pgsql-hackers@postgresql.org>
Subject: Re: Monitoring roles patch
Date: Tue, 28 Mar 2017 13:37:21 -0400
Message-ID: <20170328173721.GF9812@tamriel.snowman.net> (raw)
In-Reply-To: <CA+TgmoZA-gM+Un0E65seyVT45axpaH8q-QRDs8L+nSUrynkSMA@mail.gmail.com>
References: <20170322131510.GC9812@tamriel.snowman.net>
	<CA+OCxoyt9OMWaK=g2sL8qCTcwrS-8j3=06AZLzXQZ61sUn7gtA@mail.gmail.com>
	<CA+OCxozGTGd-x+cx03N=KJVK=soJwOpTWkq_=zac3P04aBCU4Q@mail.gmail.com>
	<20170323122335.GK9812@tamriel.snowman.net>
	<CA+OCxozZxJouNjY4+-heYSUk=qagoytQXnSjMyO5-R_a_mddKA@mail.gmail.com>
	<c1d3db24-85f0-96bb-0ec3-aeddd9d35941@2ndquadrant.com>
	<CA+OCxox8HW6obNKY5atVA6pX=Z=wQw6rTGcggy4N05k=mLkaAQ@mail.gmail.com>
	<FEE8D3A7-FDBF-432F-BEEF-F28B7D3AD2F4@gmail.com>
	<CA+OCxoy7rqEZ65byS+3E_0dsTKYD8NcUzQB1SiGknARmbxBTDg@mail.gmail.com>
	<CA+TgmoZA-gM+Un0E65seyVT45axpaH8q-QRDs8L+nSUrynkSMA@mail.gmail.com>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-hackers>

Greetings,

* Robert Haas (robertmhaas@gmail.com) wrote:
> On Tue, Mar 28, 2017 at 12:47 PM, Dave Page <dpage@pgadmin.org> wrote:
> >> I don't see any precedent in the code for having a hardcoded role, other than
> >> superuser, and allowing privileges based on a hardcoded test for membership
> >> in that role.  I'm struggling to think of all the security implications of that.
> >
> > This would be the first.
> 
> Isn't pg_signal_backend an existing precedent?

Yes, it is.

Thanks!

Stephen

Attachments:

  signature.asc (application/pgp-signature, 818B) download

view thread (61+ messages)  latest in thread

Message-ID: <20170328173721.GF9812@tamriel.snowman.net>
Permalink:  ../20170328173721.GF9812@tamriel.snowman.net/
Also on:    postgresql.org/message-id/20170328173721.GF9812@tamriel.snowman.net

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-hackers@postgresql.org
  Cc: sfrost@snowman.net, robertmhaas@gmail.com, dpage@pgadmin.org, hornschnorter@gmail.com, peter.eisentraut@2ndquadrant.com
  Subject: Re: Monitoring roles patch
  In-Reply-To: <20170328173721.GF9812@tamriel.snowman.net>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox