Re: Protecting stored procedures

From: Andrew Sullivan <ajs(at)crankycanuck(dot)ca>
To: pgsql-general(at)postgresql(dot)org
Subject: Re: Protecting stored procedures
Date: 2011-04-07 16:45:05
Message-ID: 20110407164505.GL13162@shinkuro.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On Thu, Apr 07, 2011 at 09:31:20AM -0500, Michael Gould wrote:
> We wouldn't make any of the system users a superuser in Postgres and in my
> 20+ years experience in the industry we provide software for, the
> possibility of having any users of the system that are able to hack or even
> understand what they have if they were able to is slim.

So you aren't afraid your users are going to take this code, but you
want to put (relatively meaningless) protection in place anyway?

I guess maybe the security definer functions might help you.

A

--
Andrew Sullivan
ajs(at)crankycanuck(dot)ca

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Joshua D. Drake 2011-04-07 17:16:46 Re: Protecting stored procedures
Previous Message John R Pierce 2011-04-07 16:13:02 Re: Protecting stored procedures