On Mon, Oct 3, 2016 at 3:54 PM, Gilles Darold <gil...@darold.net> wrote: > 4) An other problem is that like this this patch will allow anyone to upload > into a > column the content of any system file that can be read by postgres system user > and then allow non system user to read its content.
I thought this was a client-side feature, so that it would let a client upload any file that the client can read, but not things that can only be read by the postgres system user. -- Robert Haas EnterpriseDB: http://www.enterprisedb.com The Enterprise PostgreSQL Company -- Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers
