public inbox for [email protected]
help / color / mirror / Atom feedFrom: =?utf-8?B?WWVYaXU=?= <[email protected]>
To: =?utf-8?B?QW1pdCBLYXBpbGE=?= <[email protected]>
To: =?utf-8?B?UGV0ZXIgU21pdGg=?= <[email protected]>
Cc: =?utf-8?B?cGdzcWwtaGFja2Vycw==?= <[email protected]>
Subject: Re: Feature Recommendations for Logical Subscriptions
Date: Fri, 11 Apr 2025 13:47:59 +0800
Message-ID: <[email protected]> (raw)
In-Reply-To: <CAA4eK1JQzbY-77JFt0wEazwxG3j=afhHxG1n2_Qx=PzuLKFPrg@mail.gmail.com>
References: <[email protected]>
<CAA4eK1+Z1=ZM5AJZz_GUWsjY982MfskEmYQS0QA6xGUZcJ9JGQ@mail.gmail.com>
<[email protected]>
<CAHut+Ps-fWX+L=oGidXFxpBf532Zk18Ju9wvZqpbdi=5pp9BBg@mail.gmail.com>
<CAA4eK1JQzbY-77JFt0wEazwxG3j=afhHxG1n2_Qx=PzuLKFPrg@mail.gmail.com>
Amit Kapila, Yes, as you mentioned, but I’d like to add that when using the exclusion method for newly added columns, there’s no need to modify the publication. This is similar to how fields are automatically synchronized when columns are unspecified during initial setup. This is also a key reason why this approach is valuable.
YeXiu
[email protected]
原始邮件
发件人：Amit Kapila <[email protected]>
发件时间：2025年4月11日 12:00
收件人：Peter Smith <[email protected]>
抄送：YeXiu <[email protected]>, pgsql-hackers <[email protected]>
主题：Re: Feature Recommendations for Logical Subscriptions
On Fri, Apr 11, 2025 at 3:40 AM Peter Smith wrote:
>
> FYI, the Column List documentation [1] says
> ------
> However, do not rely on this feature for security: a malicious
> subscriber is able to obtain data from columns that are not
> specifically published. If security is a consideration, protections
> can be applied at the publisher side.
> ------
>
> IIRC, this was something to do with how the COPY done by the initial
> table sync might be manipulated by a malicious subscriber. I think you
> can find more details about this in the original thread when Column
> Lists were introduced. e.g. try searching this [2] thread for the word
> "security".
>
The same thing applies here as well. The only key difference is user
convenience in two ways: (a) when there are a lot of columns, say 100
columns, and user would like to send all data except 2 columns, (b)
adding new columns to table would require users to again run the DDL
to change the column list.
These are primarily the two pain points YeXiu wants us to solve.
YeXiu, if I misunderstood your intention, feel free to add.
--
With Regards,
Amit Kapila.
view thread (7+ messages) latest in thread
reply
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: [email protected]
Cc: [email protected], [email protected], [email protected], [email protected]
Subject: Re: Feature Recommendations for Logical Subscriptions
In-Reply-To: <[email protected]>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox