Re: protecting prosrc (was Re: [GENERAL] USAGE on schema allowed by

From: Robert Treat <xzilla(at)users(dot)sourceforge(dot)net>
To: Joe Conway <mail(at)joeconway(dot)com>
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, pgsql-hackers(at)postgresql(dot)org
Subject: Re: protecting prosrc (was Re: [GENERAL] USAGE on schema allowed by
Date: 2002-12-02 20:45:22
Message-ID: 1038861922.3720.8.camel@camel
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general pgsql-hackers

NOTE: redirecting to hackers

On Mon, 2002-12-02 at 12:50, Joe Conway wrote:
> Tom Lane wrote:
> > For example, something I've heard repeatedly is that people would like to
> > hide the source code of their SQL or PLxxx functions from users who are
> > nonetheless allowed to call those functions. A row-wise selective view of
> > pg_proc can't fix that. In many cases it's less than clear which rows of
> > which catalogs to hide anyway.
>
> It wouldn't be terribly difficult to encrypt prosrc with 3des (or maybe aes)
> using the owner's passwd from pg_shadow. We would need a new bool column in
> pg_proc (proisencrypted?) and some logic in fmgr.c.
>
> Is there sufficient interest to justify the effort?
>

I think this would be a good idea, though there becomes a question of
what type of performance hit comes into play when doing this. I suppose
if you have an option whether to encrypt it or not that would help. One
other thing is that it needs to be "decryptable" by owners and
superusers.

Robert Treat

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Christopher Kings-Lynne 2002-12-02 20:48:38 Re: 7.4 Wishlist
Previous Message Terry Yapt 2002-12-02 20:35:59 Public Schema.

Browse pgsql-hackers by date

  From Date Subject
Next Message Christopher Kings-Lynne 2002-12-02 20:48:38 Re: 7.4 Wishlist
Previous Message Rod Taylor 2002-12-02 20:36:41 Re: toast table growing indefinitely? Known