When creating a view via DBLINK, the user=... and password=... parameters shall be optional. If they are left out, then the current user accessing the view shall be impersonated implicitely to the "dblinked" database as well. Forcing anybody to hardcode a password readable within the view definition should be an absolute DON'T!

Haven't found a better place to post this request. Hope the author of dblink is reading it here, too. :-)

--
Sent via pgsql-general mailing list (pgsql-general@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general

Reply via email to