| From: | Gilles Darold <gilles(dot)darold(at)dalibo(dot)com> |
|---|---|
| To: | pgsql-hackers(at)postgresql(dot)org |
| Subject: | Re: proposal: psql \setfileref |
| Date: | 2016-10-03 21:23:56 |
| Message-ID: | 4b593783-9963-8d8d-6015-e05a32be86e4@dalibo.com |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
Le 03/10/2016 à 23:03, Robert Haas a écrit :
> On Mon, Oct 3, 2016 at 3:54 PM, Gilles Darold <gilles(at)darold(dot)net> wrote:
>> 4) An other problem is that like this this patch will allow anyone to upload into a
>> column the content of any system file that can be read by postgres system user
>> and then allow non system user to read its content.
> I thought this was a client-side feature, so that it would let a
> client upload any file that the client can read, but not things that
> can only be read by the postgres system user.
>
Yes that's right, sorry for the noise, forget this fourth report.
--
Gilles Darold
Consultant PostgreSQL
http://dalibo.com - http://dalibo.org
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Alvaro Herrera | 2016-10-03 21:44:16 | Re: Question / requests. |
| Previous Message | Robert Haas | 2016-10-03 21:03:12 | Re: proposal: psql \setfileref |