Re: Information of pg_stat_ssl visible to all users

Поиск
Список
Период
Сортировка
От Stephen Frost
Тема Re: Information of pg_stat_ssl visible to all users
Дата
Msg-id 20150830153328.GI3685@tamriel.snowman.net
обсуждение исходный текст
Ответ на Re: Information of pg_stat_ssl visible to all users  (Michael Paquier <michael.paquier@gmail.com>)
Ответы Re: Information of pg_stat_ssl visible to all users  (Andres Freund <andres@anarazel.de>)
Список pgsql-hackers
* Michael Paquier (michael.paquier@gmail.com) wrote:
> On Sun, Aug 30, 2015 at 5:27 AM, Bruce Momjian wrote:
>
> > I know I am coming in late here, but I know Heroku uses random user
> > names to allow a cluster to have per-user databases without showing
> > external user name details:
> > [...]
> > I can see them having problems with a user being able to see the SSL
> > remote user names of all connected users.
> >
>
> Yep, and I can imagine that this is the case of any company managing cloud
> nodes with Postgres embedded, and at least to me that's a real concern.

Yeah, I'm not really thrilled with all of this information being
available to everyone on the system.  We already get ding'd by people
for not limiting who can see what connections there are to the database
and this is doubling-down on that.
Thanks!
    Stephen

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: WIP: About CMake v2
Следующее
От: Andres Freund
Дата:
Сообщение: Re: Information of pg_stat_ssl visible to all users