Re: Anyone can create tables!

From: Lincoln Yeoh <lyeoh(at)pop(dot)jaring(dot)my>
To: Dan McGrath <dmcgrath19(at)home(dot)com>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: Anyone can create tables!
Date: 2001-03-11 13:51:24
Message-ID: 3.0.5.32.20010311215124.00fe3100@192.228.128.13
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

At 10:12 PM 3/10/01 -0500, Dan McGrath wrote:
>Thanks Tom. Actually its kinda holding me off really bad. I would like to
>switch to mysql, but I still feel confident in pgsql to stay. One fellow on
>irc I talked with mentioned the possibilty of creating a trigger on the
>internal pgsql tables to restrict adding or creating anything. I just think
>its very bad for me to consider opening my db to the world with that kind of
>access open to the public. Would be like hotmail allowing unlimited email
>size. You get my idea anyways Im sure.

I doubt that I would ever recommend opening any RDBMS to the world.

There is a very high chance that even if controls are put in, there will be
ways around it.

It's as bad as giving a unix/cmd shell to the world.

Aren't there other ways to do what you want without giving the world access
to your database?

Maybe each user could have their own postgresql engine running on their own
server (real or virtual).

Cheerio,
Link.

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message newsreader 2001-03-11 13:52:44 big int
Previous Message ryan 2001-03-11 05:47:38 DROP FUNCTION