public inbox for [email protected]
help / color / mirror / Atom feedFrom: Robert Haas <[email protected]>
To: Jacob Champion <[email protected]>
Cc: Andres Freund <[email protected]>
Cc: Mark Dilger <[email protected]>
Cc: Jeff Davis <[email protected]>
Cc: Amit Kapila <[email protected]>
Cc: Andrew Dunstan <[email protected]>
Cc: PostgreSQL-development <[email protected]>
Subject: Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security
Date: Thu, 9 Mar 2023 09:12:37 -0500
Message-ID: <CA+TgmoZJCxNVRHTWZz5-e3FZx5Qvn3a8KPMc7CSfcCRqQSt_3Q@mail.gmail.com> (raw)
In-Reply-To: <CAAWbhmhPFvV=TyGw0GfdLNUR6GMU0Ntcg6fEuhTNcha6f2oGig@mail.gmail.com>
References: <[email protected]>
<CAAWbhmiL=kWT=Oc=SA-U9-NnVSPGmPmzD4aNQEtahxXpCDrH0A@mail.gmail.com>
<CA+Tgmoa+CLg8JW_Rj12pmj2Y+0D=r339yryHQmdGAdd56PcdYw@mail.gmail.com>
<CA+TgmoamMHL2BTiMOVJtjAfHOy984=42Dvq8B0k+=p4rhYKCKw@mail.gmail.com>
<[email protected]>
<CA+Tgmobc_KUw1CnP4--Zss3Y_FhAnb+FyXHwn9Ej9jTBHM238A@mail.gmail.com>
<CAAWbhmgnLt57UH7j6VECLbxr5G9gAuJX__iXos7kF8fAnY_NqA@mail.gmail.com>
<CA+TgmoaNCKdVp4ur0QGjVdeETYNC-hpDArQuyDNTJM3-rJdWQg@mail.gmail.com>
<[email protected]>
<CA+TgmobpVTMan6zR8rgBNcamc1Hwn0uH-gjuOR9DLB1H-h+saQ@mail.gmail.com>
<CAAWbhmhV6JqcCpy+6qTs75OCVpkm+FviMKuZhewDQdSdbg+1bg@mail.gmail.com>
<CA+TgmobJ1sGukOjSZT3vh=7MxW33UKdm6HWVmDbZRGwtn_rKCw@mail.gmail.com>
<CAAWbhmi-PvUif0c5V=p99Bc4TA20nTim7K4o0x6HXnRVGKpo9A@mail.gmail.com>
<CA+TgmoZvSSRYAdfppHiYC25CB1f2s5fNvSJ=0kMEGdicRdk2dg@mail.gmail.com>
<[email protected]>
<CA+Tgmobit_-XTGJxZ0kzxJ7KSasQShxJz-oBGJCDbzPjL6s2-g@mail.gmail.com>
<CAAWbhmg25XaA=s04y7_LK8Q7-GSBw09fH2A5iiFESUbVaFXWqg@mail.gmail.com>
<CA+TgmoYBF75-MQ02K=4-JA02YvfLA1bsWdbjQP=evfjJGigsbA@mail.gmail.com>
<CAAWbhmhPFvV=TyGw0GfdLNUR6GMU0Ntcg6fEuhTNcha6f2oGig@mail.gmail.com>
On Wed, Mar 8, 2023 at 5:44 PM Jacob Champion <[email protected]> wrote:
>
> On Wed, Mar 8, 2023 at 11:40 AM Robert Haas <[email protected]> wrote:
> > On Wed, Mar 8, 2023 at 2:30 PM Jacob Champion <[email protected]> wrote:
> > > I don't think I necessarily like that option better than SASL-style,
> > > but hopefully that clarifies it somewhat?
> >
> > Hmm, yeah, I guess that's OK.
>
> Okay, cool.
>
> > I still don't love it, though. It feels
> > more solid to me if the proxy can actually block the connections
> > before they even happen, without having to rely on a server
> > interaction to figure out what is permissible.
>
> Sure. I don't see a way for the proxy to figure that out by itself,
> though, going back to my asymmetry argument from before. Only the
> server truly knows, at time of HBA processing, whether the proxy
> itself has authority. If the proxy knew, it wouldn't be confused.
>
> > I don't know what you mean by SASL-style, exactly.
>
> That's the one where the server explicitly names all forms of
> authentication, including the ambient ones (ANONYMOUS, EXTERNAL,
> etc.), and requires the client to choose one before running any
> actions on their behalf. That lets the require_auth machinery work for
> this case, too.
>
> --Jacob
--
Robert Haas
EDB: http://www.enterprisedb.com
view thread (11+ messages) latest in thread
reply
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: [email protected]
Cc: [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]
Subject: Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security
In-Reply-To: <CA+TgmoZJCxNVRHTWZz5-e3FZx5Qvn3a8KPMc7CSfcCRqQSt_3Q@mail.gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox