Re: GRANT USAGE on FOREIGN SERVER exposes passwords

Поиск
Список
Период
Сортировка
От Stephen Frost
Тема Re: GRANT USAGE on FOREIGN SERVER exposes passwords
Дата
Msg-id 20150205162346.GY3854@tamriel.snowman.net
обсуждение исходный текст
Ответ на Re: GRANT USAGE on FOREIGN SERVER exposes passwords  (Robert Haas <robertmhaas@gmail.com>)
Ответы Re: GRANT USAGE on FOREIGN SERVER exposes passwords  (Tom Lane <tgl@sss.pgh.pa.us>)
Список pgsql-hackers
* Robert Haas (robertmhaas@gmail.com) wrote:
> On Thu, Feb 5, 2015 at 10:48 AM, Stephen Frost <sfrost@snowman.net> wrote:
> >> If she's got dblink access, she can run arbitrary
> >> SQL queries on the remote server anyway, which is all the password
> >> would let her do.  Also, she could use dblink to run ALTER ROLE foo
> >> PASSWORD '...' on the remote server, and then she'll *definitely* know
> >> the password.
> >
> > And I thought this was about FDW options and not about dblink, really..
>
> The OP is pretty clearly asking about dblink.

I was just pointing out that it was an issue that all FDWs suffer from,
since we don't have any way for an FDW to say "don't show this option",
as discussed.
Thanks,
    Stephen

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Robert Haas
Дата:
Сообщение: Re: GRANT USAGE on FOREIGN SERVER exposes passwords
Следующее
От: Tom Lane
Дата:
Сообщение: Re: GRANT USAGE on FOREIGN SERVER exposes passwords