Re: debugger from superuser only.... why?

2023-09-28 Thread Luca Ferrari
On Wed, Sep 27, 2023 at 1:30 PM Alexander Petrossian wrote: > > > 25 сент. 2023 г., в 17:28, Tom Lane написал(а): > > Alexander Petrossian writes: > I am wondering why is this, why not allow debugging for non-privileged > users? > > Even if there's a way to restrict > > debugging

Re: debugger from superuser only.... why?

2023-09-27 Thread Tom Lane
Alexander Petrossian writes: > 25 сент. 2023 г., в 17:28, Tom Lane написал(а): >> you’d have a big problem with being able to change the behavior of >> security-definer functions. > Could you please elaborate on this, Tom? pldebugger allows you to change the contents of a function's local

Re: debugger from superuser only.... why?

2023-09-27 Thread Alexander Petrossian
> 25 сент. 2023 г., в 17:28, Tom Lane написал(а): > Alexander Petrossian writes: I am wondering why is this, why not allow debugging for non-privileged users? > Even if there's a way to restrict > debugging connections to sessions owned by the same user, I guess, there is such a way.

Re: debugger from superuser only.... why?

2023-09-25 Thread Tom Lane
Alexander Petrossian writes: >>> I am wondering why is this, why not allow debugging for non-privileged >>> users? Seems obvious to me that it'd be a nasty security hole, ie you could take control of somebody else's session and make it do things you don't have permissions for. Even if there's

Re: debugger from superuser only.... why?

2023-09-25 Thread Luca Ferrari
On Fri, Sep 22, 2023 at 9:05 PM wrote: > > hi, > the first steps to use debugger: > 1. modify config file > 2. restart server > ... > i would say, enough reasons to be superuser or not? Well, the above are not privileges "to use" the debugger, rather "to configure" the debugger. Luca > >

Re: debugger from superuser only.... why?

2023-09-25 Thread Alexander Petrossian (PAF)
> > > > SELECT * FROM pldbg_set_global_breakpoint(1, 65695, -1, NULL); > > ERROR: must be a superuser to create a breakpoint > > I am wondering why is this, why not allow debugging for non-privileged > users? > > Again, I'm suspecting that this debugger works by performing a > sandboxing and

Re: debugger from superuser only.... why?

2023-09-25 Thread Alexander Petrossian
22 сент. 2023 г., в 14:20, Luca Ferrari написал(а): >> Checked few sources, can not seem to find reasoning behind this limit: >> You must have superuser privileges to use the debugger. >> What is the reason? > I suspect the debugger will need to open a connection back to pgadmin, > and that

Re: debugger from superuser only.... why?

2023-09-22 Thread postgresql439848
hi, the first steps to use debugger: 1. modify config file 2. restart server ... i would say, enough reasons to be superuser or not?

Re: debugger from superuser only.... why?

2023-09-22 Thread Luca Ferrari
On Fri, Sep 22, 2023 at 2:00 PM Alexander Petrossian (PAF) wrote: > Some mail list you would suggest, Luka? > pgadmin mailing list, or ask EDB somehwere. >> >> > SELECT * FROM pldbg_create_listener(); >> uh oh, it mentions a listener...then there must be some "sender" >> somehwere, that

Re: debugger from superuser only.... why?

2023-09-22 Thread Luca Ferrari
On Fri, Sep 22, 2023 at 1:28 PM Alexander Petrossian wrote: > SELECT * FROM pldbg_set_global_breakpoint(1, 65695, -1, NULL); > > ERROR: must be a superuser to create a breakpoint > > > I am wondering why is this, why not allow debugging for non-privileged users? Again, I'm suspecting that this

Re: debugger from superuser only.... why?

2023-09-22 Thread Luca Ferrari
On Wed, Sep 20, 2023 at 9:32 AM Александр Петросян (web) wrote: > > Checked few sources, can not seem to find reasoning behind this limit: > > > You must have superuser privileges to use the debugger. > It means database superuser. > What is the reason? I suspect the debugger will need to open

debugger from superuser only.... why?

2023-09-19 Thread web
Checked few sources, can not seem to find reasoning behind this limit:> You must have superuser privileges to use the debugger.From here. Say, in java/c++/many_others... one can debug from non-proviledged user allright. Not so with pldbgapi. What is the reason? Alexander Petrossian (PAF)