Re: GRANT USAGE on FOREIGN SERVER exposes passwords

Поиск
Список
Период
Сортировка
От Robert Haas
Тема Re: GRANT USAGE on FOREIGN SERVER exposes passwords
Дата
Msg-id CA+TgmoaNZPi++rcvNGt_qpo68thf0yNPXA+tZWJBtyWmkFD23g@mail.gmail.com
обсуждение исходный текст
Ответ на Re: GRANT USAGE on FOREIGN SERVER exposes passwords  (Stephen Frost <sfrost@snowman.net>)
Ответы Re: GRANT USAGE on FOREIGN SERVER exposes passwords  (Stephen Frost <sfrost@snowman.net>)
Список pgsql-hackers
On Thu, Feb 5, 2015 at 10:48 AM, Stephen Frost <sfrost@snowman.net> wrote:
>> If she's got dblink access, she can run arbitrary
>> SQL queries on the remote server anyway, which is all the password
>> would let her do.  Also, she could use dblink to run ALTER ROLE foo
>> PASSWORD '...' on the remote server, and then she'll *definitely* know
>> the password.
>
> And I thought this was about FDW options and not about dblink, really..

The OP is pretty clearly asking about dblink.

-- 
Robert Haas
EnterpriseDB: http://www.enterprisedb.com
The Enterprise PostgreSQL Company



В списке pgsql-hackers по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: Possible problem with pgcrypto
Следующее
От: Stephen Frost
Дата:
Сообщение: Re: GRANT USAGE on FOREIGN SERVER exposes passwords