From: Trevor Talbot <quension@gmail.com>
To: Joshua D. Drake <jd@commandprompt.com>
Cc: Roberts, Jon <Jon.Roberts@asurion.com>
Cc: Kris Jurka <books@ejurka.com>
Cc: Merlin Moncure <mmoncure@gmail.com>
Cc: Jonah H. Harris <jonah.harris@gmail.com>
Cc: Bill Moran <wmoran@collaborativefusion.com>
Cc: pgsql-performance@postgresql.org
Subject: Re: viewing source code
Date: Wed, 19 Dec 2007 07:45:06 -0800
Message-ID: <90bce5730712190745g59ce2484hdc0a05bee406804e@mail.gmail.com> (raw)
In-Reply-To: <20071218105249.6a1a4c31@commandprompt.com>
References: <1A6E6D554222284AB25ABE3229A92762112A17@nrtexcus702.int.asurion.com>
<20071218105249.6a1a4c31@commandprompt.com>
On 12/18/07, Joshua D. Drake <jd@commandprompt.com> wrote:
> On Tue, 18 Dec 2007 10:05:46 -0600
> "Roberts, Jon" <Jon.Roberts@asurion.com> wrote:
> > If we are talking about enhancement requests, I would propose we
> > create a role that can be granted/revoked that enables a user to see
> > dictionary objects like source code. Secondly, users should be able
> > to see their own code they write but not others unless they have been
> > granted this dictionary role.
> You are likely not going to get any support on an obfuscation front.
> This is an Open Source project :P
Wait, what? This is a DBMS, with some existing security controls
regarding the data users are able to access, and the proposal is about
increasing the granularity of that control. Arbitrary function bodies
are just as much data as anything else in the system.
Obfuscation would be something like encrypting the function bodies so
that even the owner or administrator cannot view or modify the code
without significant reverse engineering. I mean, some people do want
that sort of thing, but this proposal isn't even close.
Where on earth did "obfuscation" come from?
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-performance@postgresql.org
Cc: quension@gmail.com, jd@commandprompt.com, Jon.Roberts@asurion.com, books@ejurka.com, mmoncure@gmail.com, jonah.harris@gmail.com, wmoran@collaborativefusion.com
Subject: Re: viewing source code
In-Reply-To: <90bce5730712190745g59ce2484hdc0a05bee406804e@mail.gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox