Re: search_path wildcard?

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Ron Johnson <ronljohnsonjr(at)gmail(dot)com>
Cc: pgsql-general <pgsql-general(at)postgresql(dot)org>
Subject: Re: search_path wildcard?
Date: 2024-05-22 17:58:50
Message-ID: 4178924.1716400730@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Ron Johnson <ronljohnsonjr(at)gmail(dot)com> writes:
> That would be a helpful feature for administrators, when there are multiple
> schemas in multiple databases, on multiple servers: superusers get ALTER
> ROLE foo SET SEARCH_PATH = '*'; and they're done with it.

... and they're pwned within five minutes by any user with the wits
to create a trojan-horse function or operator. Generally speaking,
you want admins to run with a minimal search path not a maximal one.

regards, tom lane

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Isaac Morland 2024-05-22 18:01:54 Re: search_path and SET ROLE
Previous Message Ron Johnson 2024-05-22 17:54:21 Re: search_path wildcard?