Re: pg_stat_statements showing passwords while create or alter users.

On Fri, 17 Apr 2020 at 03:50, PG Doc comments form <noreply(at)postgresql(dot)org>
wrote:

>
> pg_stat_statements is recording passwords also, is there any way to avoid
> the logging of passwords without droping extension package.
> testdb=> create user test1 with password 'test123';
> CREATE ROLE
> testdb=> create user test2 with encrypted password 'test123';
> CREATE ROLE
> test=> select query from pg_stat_statements where query like '%test%';
> query
> -----------------------------------------------------------
> create user test1 with encrypted password 'test123'
> create user test2 with password 'test123'
>
> pg_stat_statements has parameter "pg_stat_statements.track_utility" to
control whether utility commands are tracked. It is on by default.

Regards,

--
Euler Taveira http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services