Re: [HACKERS] Updated TODO list

From: Jan Wieck <wieck@debis.com>
> >
> > I can "select * from pgshadow" as the database owner.
> >
>
>     You  must  be  a  database superuser or a superuser must have
>     granted SELECT right for pg_shadow to you.
>
>
> Jan

DB admin has no business knowing other's passwords. The current security
scheme is seriously flawed.

Gene Sokolov.