Dean Rasheed <[EMAIL PROTECTED]> wrote: > * client_sql_trace = on | off - settable by a normal user to allow a > client session to see the sql_trace output. If this parameter is on, > the sql_trace will be logged as NOTICE output.
In terms of security, is it ok to show normal users SQLs used in functions that are owned by other users? Users can call not-owned functions only if they have EXECUTE privilege on them. -- presently we can see function bodies from pg_proc.prosrc freely, though. Regards, --- ITAGAKI Takahiro NTT Open Source Software Center -- Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers
