How does a user protect a custom variable using your code?  I don't see
any API that would allow that.


Every module is responsibile for protectiong own custom variables. Only module knows if some variable needs protection. And after module inicialisation module can call ArmorCustomVariable function. From this moment only superuser can modify this custom variable. If it call ResetPGVariable() function before then default value is protected. It's question if test for superuser is necessery, I hope so it's usefull and I have posibility write security definer function where I can safely modify custom variables.




---------------------------------------------------------------------------

>
> Regards
> Pavel Stehule
>
>
> >From: Bruce Momjian <[EMAIL PROTECTED]>
> >To: Pavel Stehule <[EMAIL PROTECTED]>
> >CC: pgsql-patches@postgresql.org, [EMAIL PROTECTED], [EMAIL PROTECTED]
> >Subject: Re: [PATCHES] simply custom variables protection
> >Date: Sat, 7 Apr 2007 11:54:13 -0400 (EDT)
> >
> >
> >Pavel, would you remind me how this is useful?
> >
> >---------------------------------------------------------------------------
> >
> >Pavel Stehule wrote:
> > > Hello
> > >
> > > this patch contains function ArmorCustomVariables. This function set
> >flag
> > > armored on any custom variable. From this moment only superuser can
> >change
> > > this variable.
> > >
> > > p.s. use it together with ResetPGVariable()
> > >
> > > Regards
> > > Pavel Stehule
> > >
> > > _________________________________________________________________
> > > Citite se osamele? Poznejte nekoho vyjmecneho diky Match.com.
> > > http://www.msn.cz/
> >
> >[ Attachment, skipping... ]
> >
> > >
> > > ---------------------------(end of broadcast)---------------------------
> > > TIP 1: if posting/reading through Usenet, please send an appropriate
> > > subscribe-nomail command to [EMAIL PROTECTED] so that your
> > >        message can get through to the mailing list cleanly
> >
> >--
> >   Bruce Momjian  <[EMAIL PROTECTED]>          http://momjian.us
> > EnterpriseDB http://www.enterprisedb.com
> >
> >   + If your life is a hard drive, Christ can be your backup. +
> >
> >---------------------------(end of broadcast)---------------------------
> >TIP 7: You can help support the PostgreSQL project by donating at
> >
> >                 http://www.postgresql.org/about/donate
>
> _________________________________________________________________
> Najdete si svou lasku a nove pratele na Match.com. http://www.msn.cz/

--
  Bruce Momjian  <[EMAIL PROTECTED]>          http://momjian.us
  EnterpriseDB                               http://www.enterprisedb.com

  + If your life is a hard drive, Christ can be your backup. +

_________________________________________________________________
Najdete si svou lasku a nove pratele na Match.com. http://www.msn.cz/


---------------------------(end of broadcast)---------------------------
TIP 9: In versions below 8.0, the planner will ignore your desire to
      choose an index scan if your joining column's datatypes do not
      match

Reply via email to