Re: [PATCHES] [PATCH] Re: Why READ ONLY transactions?

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Sean Chittenden <sean(at)chittenden(dot)org>
Cc: Christopher Browne <cbbrowne(at)libertyrms(dot)info>, pgsql-patches(at)postgresql(dot)org, Robert Treat <xzilla(at)users(dot)sourceforge(dot)net>, Gavin Sherry <swm(at)linuxworld(dot)com(dot)au>, pgsql-advocacy(at)postgresql(dot)org
Subject: Re: [PATCHES] [PATCH] Re: Why READ ONLY transactions?
Date: 2003-07-30 15:31:55
Message-ID: 10760.1059579115@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-advocacy pgsql-hackers pgsql-patches

Sean Chittenden <sean(at)chittenden(dot)org> writes:
>> I would NOT call it a "security" provision, as it is fairly easily
>> defeated using SET TRANSACTION.

> Um, why not make it an actual full blown security feature by applying
> the following patch?

It's not intended to be a security measure, and I would strongly resist
any attempt to make it so along the lines you propose. I do not want to
try to base real security on GUC settings. The GUC mechanism is not
designed to be unsubvertible, it's designed to allow convenient
administration of a bunch of settings.

In any case, we already have mechanisms for preventing specific users
from altering data: that's what GRANT/REVOKE are for. I don't think
anyone would have bothered with START TRANSACTION READ ONLY if it
weren't required by the SQL spec.

regards, tom lane

In response to

Responses

Browse pgsql-advocacy by date

  From Date Subject
Next Message Josh Berkus 2003-07-30 15:34:16 Re: What I would say if someone asked me about no win32
Previous Message Josh Berkus 2003-07-30 15:27:47 Re: [PATCH] Re: [pgsql-advocacy] Why READ ONLY transactions?

Browse pgsql-hackers by date

  From Date Subject
Next Message Tom Lane 2003-07-30 16:19:15 psql no longer handles fatal/panic errors well
Previous Message Josh Berkus 2003-07-30 15:27:47 Re: [PATCH] Re: [pgsql-advocacy] Why READ ONLY transactions?

Browse pgsql-patches by date

  From Date Subject
Next Message Nic 2003-07-30 15:40:55 Re: JDBC stored procs doc patch
Previous Message Josh Berkus 2003-07-30 15:27:47 Re: [PATCH] Re: [pgsql-advocacy] Why READ ONLY transactions?