Re: On login trigger: take three

From: Pavel Stehule <pavel(dot)stehule(at)gmail(dot)com>
To: Daniel Gustafsson <daniel(at)yesql(dot)se>
Cc: Greg Nancarrow <gregn4422(at)gmail(dot)com>, Ibrar Ahmed <ibrar(dot)ahmad(at)gmail(dot)com>, Konstantin Knizhnik <k(dot)knizhnik(at)postgrespro(dot)ru>, vignesh C <vignesh21(at)gmail(dot)com>, Ivan Panchenko <wao(at)mail(dot)ru>, PostgreSQL Hackers <pgsql-hackers(at)postgresql(dot)org>, Amit Kapila <amit(dot)kapila16(at)gmail(dot)com>, Masahiko Sawada <sawada(dot)mshk(at)gmail(dot)com>
Subject: Re: On login trigger: take three
Date: 2021-09-08 18:44:40
Message-ID: CAFj8pRAPYLVBY+Z-qeq2wyUG4BK+_oBpbJPG3nY_WXtpsa7x4g@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

st 8. 9. 2021 v 20:23 odesílatel Daniel Gustafsson <daniel(at)yesql(dot)se> napsal:

> > On 8 Sep 2021, at 16:02, Pavel Stehule <pavel(dot)stehule(at)gmail(dot)com> wrote:
>
> > In the time when event triggers were introduced, managed services were
> not too widely used like now. When we discussed this feature we thought
> about environments when users have no superuser rights and have no
> possibility to go to single mode.
>
> In situations where you don't have superuser access and cannot restart in
> single user mode, none of the bypasses in this patch would help anyways.
>

If I remember well, it should be possible - you can set GUC in connection
string, and this GUC is limited to the database owner.

> I understand the motivation, but continuing on even in the face of an
> ereport(ERROR.. ) in the hopes of being able to turn off buggy code seems
> pretty unsafe at best.
>

I don't understand what you mean. I can disable the logon trigger by GUC. I
cannot to enable an continue after an exception.

Regards

Pavel

>
> --
> Daniel Gustafsson https://vmware.com/
>
>

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Daniel Gustafsson 2021-09-08 18:49:33 Re: Support for NSS as a libpq TLS backend
Previous Message Daniel Gustafsson 2021-09-08 18:23:42 Re: On login trigger: take three