Message-ID: <403517FE.5050107@Yahoo.com>
Date: Thu, 19 Feb 2004 15:09:34 -0500
From: Jan Wieck <JanWieck@Yahoo.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US;
	rv:1.4) Gecko/20030624
MIME-Version: 1.0
To: Rodrigo Sakai <rodrigo@2bfree.com.br>
Cc: pgsql-sql@postgresql.org
Subject: Re: Compiling pl/pgsql functions
References: <20040219180521.31448.qmail@hm10.locaweb.com.br>
In-Reply-To: <20040219180521.31448.qmail@hm10.locaweb.com.br>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

Rodrigo Sakai wrote:

>>AFAIK there's not much you can do for obfuscation of pl functions right
>>now since someone will be able to see the src text in pg_proc. However,
>>are you allowing people that you don't want to see the code access to
>>write arbitrary sql to the database?
> 
>   Let me explain myself a little better. Actualy we sell software,  and some codes of the systems we develope here are inside the database as functions, so we can compile the codes of the system (php, java, etc...), but not the codes that are in the postgresql. Some of our clientes, need that a employee of them get total access to the database instaled locally,  becoming the database administrator. Thats ok, but to protect our postgresql codes (functions) i like to compile my plpgsql functions, so our client's DBA will be able to do anything he wants with the database, but will not be able to get our codes.  I insist in my question, is there a way to compile the plpgsql codes or something like that, or its better to think about writting this postgres functions in C??????
> 

Security through obscurity? Why do those people you want to hide your 
code from direct SQL access to the database in the first place?


Jan

>   Thanks for all!!!
> 
> =====================
> Rodrigo Sakai
> Database Programmer
> rodrigo@2bfree.com.br
> http://www.2bfree.com.br
> Tel:  (55) (11) 5083-5577
> Fax: (55) (11) 5549-3598
> =====================
> 
> 
> ---------------------------(end of broadcast)---------------------------
> TIP 1: subscribe and unsubscribe commands go to majordomo@postgresql.org


-- 
#======================================================================#
# It's easier to get forgiveness for being wrong than for being right. #
# Let's break this rule - forgive me.                                  #
#================================================== JanWieck@Yahoo.com #