"Marko Kreen" <[EMAIL PROTECTED]> writes:
> And user can execute only pre-determines queries/functions on system2.
If that were actually the case then the security issue wouldn't loom
quite so large, but the dynamic_query example in the plproxy regression
tests provides a perfect example of how to ruin your security.
> Do you still see a big hole?
Truck-sized, at least.
The complaint here is not that it's impossible to use plproxy securely;
the complaint is that it's so very easy to use it insecurely.
regards, tom lane
--
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers
