RE: how to remove set_config from all user
| От | Garry Chen |
|---|---|
| Тема | RE: how to remove set_config from all user |
| Дата | |
| Msg-id | BLUPR04MB3867ED05B9648CE4D6F3C42DAE80@BLUPR04MB386.namprd04.prod.outlook.com обсуждение исходный текст |
| Ответ на | Re: how to remove set_config from all user ("David G. Johnston" <david.g.johnston@gmail.com>) |
| Ответы |
Re: how to remove set_config from all user
|
| Список | pgsql-novice |
In that case what is the best practice for it? Any suggestion.
Garry
From: David G. Johnston [mailto:david.g.johnston@gmail.com]
Sent: Thursday, January 18, 2018 2:16 PM
To: Garry Chen <gc92@cornell.edu>
Cc: pgsql-novice@lists.postgresql.org
Subject: Re: how to remove set_config from all user
On Thu, Jan 18, 2018 at 12:08 PM, Garry Chen <gc92@cornell.edu> wrote:
Hi All,
Is there a way to revoke select set_config(‘eeee’,bb’,false) from users? I will not to allow any user be able to the “select set_config(….)” statement.
As a practical matter, no. They can just do: "SET ... TO ..." to get around the function privilege denial even if worked out a usable hack.
David J.
В списке pgsql-novice по дате отправления: