Re: [HACKERS] Fixing insecure security definer functions

2007-08-10 Thread Sergiy Vyshnevetskiy
3. Add optional clauses to CREATE FUNCTION and ALTER FUNCTION to specify the propath value. I suggest, but am not wedded to, PATH 'foo, bar' PATH NONE Since PATH NONE is the default, it's not really needed in CREATE FUNCTION, but it seems useful to allow it for ALTER FUNCTION.

Re: [HACKERS] crypting prosrc in pg_proc

2007-08-10 Thread Sergiy Vyshnevetskiy
On Fri, 10 Aug 2007, Gregory Stark wrote: Jonah H. Harris [EMAIL PROTECTED] writes: Obfuscation doesn't really work, it just makes big wigs in companies *think* it's not easily reversible. There is no real security. With enough time and experience, anything can be broken. But that said, I