"Marko Kreen" <markokr(at)gmail(dot)com> writes:
> And user can execute only pre-determines queries/functions on system2.
If that were actually the case then the security issue wouldn't loom
quite so large, but the dynamic_query example in the plproxy regression
tests provides a perfect example of how to ruin your security.
> Do you still see a big hole?
Truck-sized, at least.
The complaint here is not that it's impossible to use plproxy securely;
the complaint is that it's so very easy to use it insecurely.
regards, tom lane