agora inbox for pljava-dev@postgresql.org
help / color / mirror / Atom feedSubject: [Pljava-dev] One more question today: Permision failure in Backend.java
Date: Wed, 5 Mar 2008 14:06:55 -0500 (EST)
Message-ID: <Pine.BSO.4.64.0803051359310.30149@leary.csoft.net> (raw)
In-Reply-To: <56DA5079467D1C48B857C6FE59D5D4FCF9A0FA@prodeaserve.prodea.local>
References: <56DA5079467D1C48B857C6FE59D5D4FCF9A0FA@prodeaserve.prodea.local>
On Wed, 5 Mar 2008, Mike Toler wrote:
> I'm attempting to open and read a file from within my java application
> triggered by postgres.
>
> I'm doing a simple "FileInputStream" command to open the file:
> wsdl = new FileInputStream(wsdlFile);
>
Embedded postgresql server languages come in two versions, trusted and
untrusted. The "java" language is trusted meaning that it won't let
normal users escape security permissions setup for them. For example if
they could open any file, they could open the database files directly and
read data they shouldn't have access to. You probably want the "javaU"
language which is untrusted.
http://wiki.tada.se/display/pljava/Security
http://www.postgresql.org/docs/8.3/static/plperl-trusted.html
Kris Jurka
view thread (3+ messages) latest in thread
Message-ID: <Pine.BSO.4.64.0803051359310.30149@leary.csoft.net>
Permalink: ../Pine.BSO.4.64.0803051359310.30149@leary.csoft.net/
Also on: postgresql.org/message-id/Pine.BSO.4.64.0803051359310.30149@leary.csoft.net
reply
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pljava-dev@postgresql.org
Subject: Re: [Pljava-dev] One more question today: Permision failure in Backend.java
In-Reply-To: <Pine.BSO.4.64.0803051359310.30149@leary.csoft.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox