agora inbox for pljava-dev@postgresql.org  
help / color / mirror / Atom feed
Subject: [Pljava-dev] One more question today: Permision failure in Backend.java
Date: Wed, 5 Mar 2008 14:06:55 -0500 (EST)
Message-ID: <Pine.BSO.4.64.0803051359310.30149@leary.csoft.net> (raw)
In-Reply-To: <56DA5079467D1C48B857C6FE59D5D4FCF9A0FA@prodeaserve.prodea.local>
References: <56DA5079467D1C48B857C6FE59D5D4FCF9A0FA@prodeaserve.prodea.local>



On Wed, 5 Mar 2008, Mike Toler wrote:

> I'm attempting to open and read a file from within my java application
> triggered by postgres.
>
> I'm doing a simple "FileInputStream" command to open the file:
>        wsdl = new FileInputStream(wsdlFile);
>

Embedded postgresql server languages come in two versions, trusted and 
untrusted.  The "java" language is trusted meaning that it won't let 
normal users escape security permissions setup for them.  For example if 
they could open any file, they could open the database files directly and 
read data they shouldn't have access to.  You probably want the "javaU" 
language which is untrusted.

http://wiki.tada.se/display/pljava/Security
http://www.postgresql.org/docs/8.3/static/plperl-trusted.html

Kris Jurka




view thread (3+ messages)  latest in thread

Message-ID: <Pine.BSO.4.64.0803051359310.30149@leary.csoft.net>
Permalink:  ../Pine.BSO.4.64.0803051359310.30149@leary.csoft.net/
Also on:    postgresql.org/message-id/Pine.BSO.4.64.0803051359310.30149@leary.csoft.net

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pljava-dev@postgresql.org
  Subject: Re: [Pljava-dev] One more question today: Permision failure in Backend.java
  In-Reply-To: <Pine.BSO.4.64.0803051359310.30149@leary.csoft.net>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox