RE: how to remove set_config from all user

In that case what is the best practice for it? Any suggestion.

Garry

From: David G. Johnston [mailto:david(dot)g(dot)johnston(at)gmail(dot)com]
Sent: Thursday, January 18, 2018 2:16 PM
To: Garry Chen <gc92(at)cornell(dot)edu>
Cc: pgsql-novice(at)lists(dot)postgresql(dot)org
Subject: Re: how to remove set_config from all user

On Thu, Jan 18, 2018 at 12:08 PM, Garry Chen <gc92(at)cornell(dot)edu<mailto:gc92(at)cornell(dot)edu>> wrote:
Hi All,
Is there a way to revoke select set_config(‘eeee’,bb’,false) from users? I will not to allow any user be able to the “select set_config(….)” statement.

​As a practical matter, no. They can just do: "SET ... TO ..." to get around the function privilege denial even if worked out a usable hack.

David J.