Received: from localhost (unknown [200.46.204.184]) by postgresql.org (Postfix) with ESMTP id 282502E36D6 for ; Fri, 14 Dec 2007 18:03:36 -0400 (AST) Received: from postgresql.org ([200.46.204.71]) by localhost (mx1.hub.org [200.46.204.184]) (amavisd-maia, port 10024) with ESMTP id 13086-09 for ; Fri, 14 Dec 2007 18:03:26 -0400 (AST) Received: from lists.commandprompt.com (host-159.commandprompt.net [207.173.203.159]) by postgresql.org (Postfix) with ESMTP id 427072E3495 for ; Fri, 14 Dec 2007 18:03:31 -0400 (AST) Received: from perhan.alvh.no-ip.org (200-126-76-117.bk5-dsl.surnet.cl [200.126.76.117]) (authenticated bits=0) by lists.commandprompt.com (8.13.8/8.13.8) with ESMTP id lBEM3GAk030803 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 14 Dec 2007 14:03:18 -0800 Received: by perhan.alvh.no-ip.org (Postfix, from userid 1000) id 3103F47C88; Fri, 14 Dec 2007 19:03:15 -0300 (CLST) Date: Fri, 14 Dec 2007 19:03:15 -0300 From: Alvaro Herrera To: "Roberts, Jon" Cc: "'Jonah H. Harris'" , Bill Moran , "Joshua D. Drake" , pgsql-performance@postgresql.org Subject: Re: viewing source code Message-ID: <20071214220315.GF6269@alvh.no-ip.org> References: <1A6E6D554222284AB25ABE3229A927621129FA@nrtexcus702.int.asurion.com> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <1A6E6D554222284AB25ABE3229A927621129FA@nrtexcus702.int.asurion.com> User-Agent: Mutt/1.5.17 (2007-11-01) X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.0 (lists.commandprompt.com [207.173.203.159]); Fri, 14 Dec 2007 14:03:19 -0800 (PST) X-Virus-Scanned: Maia Mailguard 1.0.1 X-Archive-Number: 200712/230 X-Sequence-Number: 28046 Roberts, Jon escribió: > I'm not familiar at all with pg_read_file. Is it wide open so a user can > read any file they want? Can you not lock it down like utl_file and > directories in Oracle? That function is restricted to superusers. -- Alvaro Herrera Developer, http://www.PostgreSQL.org/ "The Postgresql hackers have what I call a "NASA space shot" mentality. Quite refreshing in a world of "weekend drag racer" developers." (Scott Marlowe)