Re: Re: [PATCHES] Fw: Isn't pg_statistic a security hole - Solution Proposal

From: Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us>
To: Peter Eisentraut <peter_e(at)gmx(dot)net>
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Joe Conway <joe(at)conway-family(dot)com>, PostgreSQL Development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Re: [PATCHES] Fw: Isn't pg_statistic a security hole - Solution Proposal
Date: 2001-06-12 16:15:22
Message-ID: 200106121615.f5CGFNu16522@candle.pha.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers pgsql-patches

> Tom Lane writes:
>
> > Could we make the assumption that table names in catalogs
> > will be of type 'name'?
>
> I wouldn't want to guarantee it for the information schema.
>
> > If so, it'd work to make two versions of the has_table_privilege
> > function, one taking type "name" and the other taking type "text".
> > The "name" version would take its input as-is, the "text" version
> > would do case folding and truncation.
>
> Target typing is ugly.
>
> I've tried to look up the supposed \paraphrase{we had enough problems
> before we added the existing behaviour to setval, etc.} discussion but
> couldn't find it. My experience on the mailing list is that it goes the
> other way.

I am confused. What are you suggesting as far as having a name and text
version of the functions?

--
Bruce Momjian | http://candle.pha.pa.us
pgman(at)candle(dot)pha(dot)pa(dot)us | (610) 853-3000
+ If your life is a hard drive, | 830 Blythe Avenue
+ Christ can be your backup. | Drexel Hill, Pennsylvania 19026

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Peter Eisentraut 2001-06-12 16:19:05 Re: Re: [PATCHES] Australian timezone configure option
Previous Message Peter Eisentraut 2001-06-12 16:01:23 Re: Re: [PATCHES] Fw: Isn't pg_statistic a security hole - Solution Proposal

Browse pgsql-patches by date

  From Date Subject
Next Message Peter Eisentraut 2001-06-12 16:19:05 Re: Re: [PATCHES] Australian timezone configure option
Previous Message Peter Eisentraut 2001-06-12 16:01:23 Re: Re: [PATCHES] Fw: Isn't pg_statistic a security hole - Solution Proposal