Skip site navigation (1) Skip section navigation (2)

Re: prevent users from seeing pl/pgsql code in pgadmin

From: "Merlin Moncure" <merlin(dot)moncure(at)rcsonline(dot)com>
To: "Dave Page" <dpage(at)vale-housing(dot)co(dot)uk>
Cc: <pgadmin-hackers(at)postgresql(dot)org>
Subject: Re: prevent users from seeing pl/pgsql code in pgadmin
Date: 2005-03-17 14:44:10
Message-ID: 6EE64EF3AB31D5448D0007DD34EEB3412A7655@Herge.rcsinc.local (view raw or flat)
Thread:
Lists: pgadmin-hackers
Dave Page wrote:
> To be honest I'm not keen to expend time and add to the complexity of
> the code to add obscurity (I can't in good conscience call it
security)
> that is so easily bypassed. This seems kinda like adding an entry
> control system to a door next to a large open window.
> 
> Regards, Dave.

Well I agree 100% on the security point.  I have some short-term needs
stemming from management's concern about not being able to control
non-privileged users from being able to see our code in pgAdmin.  

I was expecting your answer so my only recourse is to hack the server
sources to meet my needs. :)

Merlin


pgadmin-hackers by date

Next:From: cvsDate: 2005-03-18 21:08:44
Subject: CVS Commit by dpage: Include the hostname in the connect string for
Previous:From: Florian G. PflugDate: 2005-03-17 12:44:43
Subject: Re: [PATCH] Various OSX fixes & .app bundle building

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group