Re: proposal: psql \setfileref

From: Robert Haas <robertmhaas(at)gmail(dot)com>
To: Gilles Darold <gilles(at)darold(dot)net>
Cc: "pgsql-hackers(at)postgresql(dot)org" <pgsql-hackers(at)postgresql(dot)org>, Pavel Stehule <pavel(dot)stehule(at)gmail(dot)com>
Subject: Re: proposal: psql \setfileref
Date: 2016-10-03 21:03:12
Message-ID: CA+Tgmob=3MBBsQQEFmU0e1kQW8kyqe2_h_qZvzBgkSwLhSHq3A@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Mon, Oct 3, 2016 at 3:54 PM, Gilles Darold <gilles(at)darold(dot)net> wrote:
> 4) An other problem is that like this this patch will allow anyone to upload into a
> column the content of any system file that can be read by postgres system user
> and then allow non system user to read its content.

I thought this was a client-side feature, so that it would let a
client upload any file that the client can read, but not things that
can only be read by the postgres system user.

--
Robert Haas
EnterpriseDB: http://www.enterprisedb.com
The Enterprise PostgreSQL Company

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Gilles Darold 2016-10-03 21:23:56 Re: proposal: psql \setfileref
Previous Message Robert Haas 2016-10-03 21:00:40 Re: asynchronous execution