Mark Dilger <hornschnor...@gmail.com> writes: > On Aug 8, 2018, at 7:47 AM, Tom Lane <t...@sss.pgh.pa.us> wrote: >> The advantage of a function trust mechanism is that it'd provide >> security against calling functions you didn't intend to without >> any visible changes in normal application behavior. The security >> team gave up on that approach because it seemed too complicated to >> pursue as a secretly-developed security patch, but I still think >> it's the right long-term answer.
> Do you have a WIP patch partially developed for this? If it is no > longer secret, perhaps the rest of us could take a look? Yeah, I do have a POC prototype, let me blow the dust off it ... regards, tom lane