Re: Getting error codes for failed queries?

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Peter Eisentraut <peter_e(at)gmx(dot)net>
Cc: Alvaro Herrera <alvherre(at)dcc(dot)uchile(dot)cl>, Alejandro Forero Cuervo <bachue(at)bachue(dot)com>, pgsql-general(at)postgresql(dot)org, boti(at)nimonic(dot)com
Subject: Re: Getting error codes for failed queries?
Date: 2003-10-15 20:56:50
Message-ID: 1682.1066251410@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Peter Eisentraut <peter_e(at)gmx(dot)net> writes:
> Alvaro Herrera writes:
>> Yes, unless you leave to lc_messages option defined to "C".
>> Unfortunately this cannot be changed at runtime by non-superusers, I
>> don't know why.

> Because otherwise any random user could obscure his actions in the server
> log by setting the language to something the admin can't read.

Hmm, that seems overly paranoid to me. J Random Luser could not obscure
his actions (if the admin is logging SQL statements). He could possibly
obscure his error messages, but is that enough of a security risk to
take away the ability of users to read their own errors in a convenient
language? I'd lean to "no".

Of course the really nice answer would be to have different language
settings for messages to the system log and messages to the client, but
I suppose that's probably not very practical given the way gettext works.

regards, tom lane

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Tom Lane 2003-10-15 20:57:44 Re: Getting error codes for failed queries?
Previous Message Bruce Momjian 2003-10-15 20:13:21 Re: Cygwin? or paid version from SRA?