Re: Re: [PATCHES] Fw: Isn't pg_statistic a security hole - Solution Proposal
От | Bruce Momjian |
---|---|
Тема | Re: Re: [PATCHES] Fw: Isn't pg_statistic a security hole - Solution Proposal |
Дата | |
Msg-id | 200106121615.f5CGFNu16522@candle.pha.pa.us обсуждение исходный текст |
Ответ на | Re: Re: [PATCHES] Fw: Isn't pg_statistic a security hole - Solution Proposal (Peter Eisentraut <peter_e@gmx.net>) |
Список | pgsql-hackers |
> Tom Lane writes: > > > Could we make the assumption that table names in catalogs > > will be of type 'name'? > > I wouldn't want to guarantee it for the information schema. > > > If so, it'd work to make two versions of the has_table_privilege > > function, one taking type "name" and the other taking type "text". > > The "name" version would take its input as-is, the "text" version > > would do case folding and truncation. > > Target typing is ugly. > > I've tried to look up the supposed \paraphrase{we had enough problems > before we added the existing behaviour to setval, etc.} discussion but > couldn't find it. My experience on the mailing list is that it goes the > other way. I am confused. What are you suggesting as far as having a name and text version of the functions? -- Bruce Momjian | http://candle.pha.pa.us pgman@candle.pha.pa.us | (610) 853-3000+ If your life is a hard drive, | 830 Blythe Avenue + Christ can be your backup. | Drexel Hill, Pennsylvania19026
В списке pgsql-hackers по дате отправления: