On 5/12/22 11:29, Bryn Llewellyn wrote:
> I've prototyped this scheme. It seems to work as designed. A client that connects with psql (or any other tool) can
listthe API functions and whatever \df and \sf show. (notice that \d will reveal nothing.)But doing this reveals only
thenames of the functions that are called (which will be identical to the jacket names—so no risk here) and the name(s)
ofthe schema(s) where they live (so a minor theoretical risk here).
>
> Full disclosure: I've never done this in anger.
Try select * from pg_class or select * from pg_attribute or any of the
other system catalogs.
--
Adrian Klaver
adrian.klaver@aklaver.com