Re: who can view pg_stat_activity?
От | Cory Nemelka |
---|---|
Тема | Re: who can view pg_stat_activity? |
Дата | |
Msg-id | CAMe5Gn3UO517TnjL2SgfCdFH0=OiKvA74d-Wgorp2E_6y4dS3Q@mail.gmail.com обсуждение исходный текст |
Ответ на | Re: who can view pg_stat_activity? (Shreeyansh Dba <shreeyansh2014@gmail.com>) |
Ответы |
Re: who can view pg_stat_activity?
|
Список | pgsql-admin |
this seems to be a security hole. this means I can see query text for queries that aren't mine. anyone else concerned?
--cnemelka
On Wed, Feb 7, 2018 at 10:17 AM, Shreeyansh Dba <shreeyansh2014@gmail.com> wrote:
Hi Mark Steben,There is no superuser required to view pg_stat_activity, a normal user can also view or access.On Wed, Feb 7, 2018 at 10:27 PM, Mark Steben <mark.steben@drivedominion.com> wrote: Good morning,We currently run postgres 9.4. The only way to view the pg_stat_activity view that I can see is that you must be a superuser. I couldn't find anything in the documentation to confirm or refute this. Could you please confirm if this is true or if not, what privileges are required?Thank you for your time.--Mark Steben
Database Administrator
@utoRevenue | Autobase
CRM division of Dominion Dealer Solutions
95D Ashley Ave.
West Springfield, MA 01089
t: 413.327-3045
f: 413.383-9567www.fb.com/DominionDealerSolut
ions
www.twitter.com/DominionDealer
www.drivedominion.com
В списке pgsql-admin по дате отправления: