Re: Isn't pg_statistic a security hole?

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: "Serguei Mokhov" <sa_mokho(at)alcor(dot)concordia(dot)ca>
Cc: pgsql-hackers(at)postgresql(dot)org
Subject: Re: Isn't pg_statistic a security hole?
Date: 2001-05-06 17:27:31
Message-ID: 28851.989170051@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

"Serguei Mokhov" <sa_mokho(at)alcor(dot)concordia(dot)ca> writes:
> Being a simple user, I still want to view the stats from the table,
> but it should be limited only to the stuff I own. I don't wanna let
> others see any of my info, however. The SU's, of course, should be
> able to read all the stats.

This is infeasible since we don't have a concept of per-row permissions.
It's all or nothing.

regards, tom lane

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Lincoln Yeoh 2001-05-06 17:56:18 Re: Re: New Linux xfs/reiser file systems
Previous Message Serguei Mokhov 2001-05-06 17:23:03 Re: Isn't pg_statistic a security hole?