| From: | David Fetter <david(at)fetter(dot)org> |
|---|---|
| To: | Thomas Hallgren <thhal(at)mailblocks(dot)com> |
| Cc: | "pgsql-hackers(at)postgresql(dot)org" <pgsql-hackers(at)postgresql(dot)org> |
| Subject: | Re: Interpretation of TRUSTED |
| Date: | 2005-02-08 22:39:00 |
| Message-ID: | 20050208223900.GG14451@fetter.org |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
On Tue, Feb 08, 2005 at 11:12:07PM +0100, Thomas Hallgren wrote:
> Hi,
> A TRUSTED language specifies that ordinary users can use the
> language. It also implies that access to the file system should be
> prevented. In essence, ordinary users can never access the
> filesystem.
>
> Is it OK to design a trusted language so that it allows access to
> the filesystem provided that the session user is a super-user?
I believe that that is what UNTRUSTED languages are for. Only the
super-user may create functions in them, although there is no inherent
restriction on other users' calling those functions.
Cheers,
D
--
David Fetter david(at)fetter(dot)org http://fetter.org/
phone: +1 510 893 6100 mobile: +1 415 235 3778
Remember to vote!
| From | Date | Subject | |
|---|---|---|---|
| Next Message | pgsql | 2005-02-08 22:43:30 | Re: Query optimizer 8.0.1 (and 8.0) |
| Previous Message | Josh Berkus | 2005-02-08 22:18:37 | Re: Query optimizer 8.0.1 (and 8.0) |