Re: Row data is reflected in DETAIL message when constraints fail on insert/update

From: Shay Rojansky <roji(at)roji(dot)org>
To: Adrian Klaver <adrian(dot)klaver(at)aklaver(dot)com>
Cc: William Denton <wdenton(at)gmail(dot)com>, pgsql-general(at)postgresql(dot)org
Subject: Re: Row data is reflected in DETAIL message when constraints fail on insert/update
Date: 2019-06-20 11:26:23
Message-ID: CADT4RqDYLKWxxHejU2ZE6Wmveo8x09Zf8aw4pdT-=0uU82Us=Q@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Shay here, maintainer of the Npgsql driver for .NET.

>> Is there a setting where i can disable the DETAIL field being populated
>> with row data?
>
> See:
>
>
https://www.postgresql.org/docs/11/runtime-config-logging.html#RUNTIME-CONFIG-LOGGING-WHAT
>
> log_error_verbosity

While this is helpful, this does not seem to quite fit:

1. As this is about personal sensitive data (including conceivably
authentication information), the fact that the default is to log seems
problematic.
2. The TERSE setting also disables HINT, QUERY and CONTEXT.
3. There may be other information sent in the DETAIL messages which does
not contain sensitive data. There's no reason to have that disabled along
with the sensitive data.

In other words, this isn't about verbosity, but about sensitive data. It
seems like a specific knob for sensitive information may be required, which
would be off by default and would potentially affect other fields as well
(if relevant).

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Karsten Hilbert 2019-06-20 11:45:27 Re: Row data is reflected in DETAIL message when constraints fail on insert/update
Previous Message pbj@cmicdo.com 2019-06-20 09:23:58 Re: [EXT EMAIL] Re: First Time Starting Up PostgreSQL and Having Problems