From: | Bruce Momjian <bruce(at)momjian(dot)us> |
---|---|
To: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
Cc: | greatvovan(at)gmail(dot)com, pgsql-docs(at)lists(dot)postgresql(dot)org |
Subject: | Re: User mapping security |
Date: | 2023-11-09 22:09:55 |
Message-ID: | ZU1Ys5jo9C99Wh4Y@momjian.us |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-docs |
On Thu, Nov 9, 2023 at 05:03:33PM -0500, Tom Lane wrote:
> Bruce Momjian <bruce(at)momjian(dot)us> writes:
> > On Tue, Jul 16, 2019 at 02:01:00AM +0000, PG Doc comments form wrote:
> >> I suppose it should be warned on the pages that foreign credentials with be
> >> stored as simple text and will be available for viewing in pg_user_mappings.
>
> > I know this is four years old, but the attached patch documents it. I
> > don't think postgresql-fdw needs it since it relies on user mapping and
> > discourages passwords in the connection string.
>
> This is far too alarmist. It ignores the privilege restrictions that
> are built into the pg_user_mappings view. Random users can't see
> umoptions.
True. I wasn't sure how much of an issue it was to expose passwords at
the SQL level, but I will drop the idea.
--
Bruce Momjian <bruce(at)momjian(dot)us> https://momjian.us
EDB https://enterprisedb.com
Only you can decide what is important to you.
From | Date | Subject | |
---|---|---|---|
Next Message | Bruce Momjian | 2023-11-09 22:52:26 | Re: WAL Configuration Grammar Fix |
Previous Message | Tom Lane | 2023-11-09 22:03:33 | Re: User mapping security |