| From: | "Merlin Moncure" <merlin(dot)moncure(at)rcsonline(dot)com> |
|---|---|
| To: | "Dave Page" <dpage(at)vale-housing(dot)co(dot)uk> |
| Cc: | <pgadmin-hackers(at)postgresql(dot)org> |
| Subject: | Re: prevent users from seeing pl/pgsql code in pgadmin |
| Date: | 2005-03-17 14:44:10 |
| Message-ID: | 6EE64EF3AB31D5448D0007DD34EEB3412A7655@Herge.rcsinc.local |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgadmin-hackers |
Dave Page wrote:
> To be honest I'm not keen to expend time and add to the complexity of
> the code to add obscurity (I can't in good conscience call it
security)
> that is so easily bypassed. This seems kinda like adding an entry
> control system to a door next to a large open window.
>
> Regards, Dave.
Well I agree 100% on the security point. I have some short-term needs
stemming from management's concern about not being able to control
non-privileged users from being able to see our code in pgAdmin.
I was expecting your answer so my only recourse is to hack the server
sources to meet my needs. :)
Merlin
| From | Date | Subject | |
|---|---|---|---|
| Next Message | cvs | 2005-03-18 21:08:44 | CVS Commit by dpage: Include the hostname in the connect string for |
| Previous Message | Florian G. Pflug | 2005-03-17 12:44:43 | Re: [PATCH] Various OSX fixes & .app bundle building |