Received: from localhost (unknown [200.46.204.191]) by postgresql.org (Postfix) with ESMTP id 4A6482E3F0C for ; Thu, 20 Dec 2007 18:54:56 -0400 (AST) Received: from postgresql.org ([200.46.204.71]) by localhost (mx1.hub.org [200.46.204.191]) (amavisd-maia, port 10024) with ESMTP id 33899-07 for ; Thu, 20 Dec 2007 18:54:39 -0400 (AST) Received: from mu-out-0910.google.com (mu-out-0910.google.com [209.85.134.188]) by postgresql.org (Postfix) with ESMTP id 62E972E4483 for ; Thu, 20 Dec 2007 18:54:39 -0400 (AST) Received: by mu-out-0910.google.com with SMTP id i10so130421mue.5 for ; Thu, 20 Dec 2007 14:54:38 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; bh=r32/DRacHuPrPRtdH72RjkldVJsMA6fSM4xqNJkam9g=; b=My0t1KSufsJKknP3k1Um297bc1LHPXPAds2cznaDrIo/Rp+2NX7Hcn37lBcFbZ2M+S724emPnVgwt3jtlrTu2C/12MJMWUSBW+50+GfjsMDNM/SFdabaUgtsyy0UIQLW7kKybpXMoDpLpAS6YzQmmEHv79eubgXWHFPA3VurZRg= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=t+mV+QoAXTdJGLWz3h4XQnm1gk6mrFm2x8qk/Ts4rsfi4hs9KSdcjFLUJXe9aYeX5s9G7Rl2sHPLT0GqXz3F/AvkxZFOZQ3u7vLPxWQDUIMcKGq9WmeNkBYLamJxF7cqDpd9IR7rk3KYykaw6LkHZsQDn0K9GXh4i9PZrHRE9m4= Received: by 10.78.83.15 with SMTP id g15mr1015390hub.6.1198191277542; Thu, 20 Dec 2007 14:54:37 -0800 (PST) Received: by 10.78.18.2 with HTTP; Thu, 20 Dec 2007 14:54:37 -0800 (PST) Message-ID: Date: Thu, 20 Dec 2007 17:54:37 -0500 From: "Merlin Moncure" To: "Alvaro Herrera" Subject: Re: viewing source code Cc: "Joshua D. Drake" , "Trevor Talbot" , "Roberts, Jon" , "Kris Jurka" , "Jonah H. Harris" , "Bill Moran" , pgsql-performance@postgresql.org In-Reply-To: <20071220222821.GG11586@alvh.no-ip.org> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <1A6E6D554222284AB25ABE3229A92762112A33@nrtexcus702.int.asurion.com> <476A9ADF.5030101@commandprompt.com> <90bce5730712201047m4dd0fe05k6b1fccc57897326f@mail.gmail.com> <20071220114011.64a650d7@commandprompt.com> <20071220200739.GC11586@alvh.no-ip.org> <20071220222821.GG11586@alvh.no-ip.org> X-Virus-Scanned: Maia Mailguard 1.0.1 X-Archive-Number: 200712/334 X-Sequence-Number: 28150 On Dec 20, 2007 5:28 PM, Alvaro Herrera wrote: > > I don't really agree that wrapping pl/pgsql with encryptor/decryptor > > is a bad idea. > > Right. But do you agree that it is separate from having hidden prosrc? > If we can complete a design then let's shot that way, and aim at > encryption sometime in the future :-) > > I have to note that I would probably not be the one to actually produce > a patch in this direction, or even to work on a working, detailed design > :-) You just read Joshua's opinion on this issue and I don't think I > need to say more :-) it is separate. doing it hiding prosrc way requires, as i see it a) row/col security, or b) view switcheroo row/col security is great but views (IMO) are a better approach to this generally. archives is of course replete with numerous generally fruitless treatments of both topics. view switcheroo is more of a 'do the ends justify the means' debate. this could turn into a big discussion about what else could be done with the system catalogs. since its not really all that difficult to disable access to pg_proc, and there are relatively few side effects outside of hosing pgadmin, i don't think the ends do justify the means at least in terms of internal server changes. If the necessary features get added in for other reasons, then perhaps... wrapping language handlers is interesting from other angles too. many times I've wanted to do preprocessing on functions without sacrificing ability of pasting from psql. merlin