On Sep 15, 2008, at 1:15 PM, Scott Marlowe wrote:
But whether it's oracle or postgresql, this is just security through obscurity. If you have root access on the server either method would be trivial to hack.
You just contradicted yourself. If you have root access on the server all bets are off, period. No database security at all applies any longer. Even just non-privileged read access to the files is sufficient.
Database-level security only pertains to accesses within the database, and for this reason, it would not be security through obscurity, unless you could work around it by querying the catalog tables as a non-superuser.
Cheers, -- Casey Allen Shobe Database Architect, The Berkeley Electronic Press -- Sent via pgsql-general mailing list (pgsql-general@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-general
