Thread

1. Compiling pl/pgsql functions

   Rodrigo Sakai <rodrigo@2bfree.com.br> — 2004-02-19T12:44:12Z

      Hi, I'm responsable for the database here in the company, and I like to know if is there a way to compile my pl/pgsql functions, its not a performance problem, it is more a security problem, i don like to have somebody looking into my codes and see the company rules.
     Is there a way to do that, or the only way is writting my functions in C??????
     
     Thanks for any help and regards to all!!!
   
   
   
   =====================
   Rodrigo Sakai
   Database Programmer
   rodrigo@2bfree.com.br
   http://www.2bfree.com.br
   Tel:  (55) (11) 5083-5577
   Fax: (55) (11) 5549-3598
   =====================
   
   
   

2. Re: Compiling pl/pgsql functions

   Viorel Dragomir <bc@vio.ro> — 2004-02-19T14:01:48Z

   So use Grant more wisely.
   
   ----- Original Message ----- 
   From: "Rodrigo Sakai" <rodrigo@2bfree.com.br>
   To: <pgsql-sql@postgresql.org>
   Sent: Thursday, February 19, 2004 2:44 PM
   Subject: [SQL] Compiling pl/pgsql functions
   
   
   >    Hi, I'm responsable for the database here in the company, and I like to
   know if is there a way to compile my pl/pgsql functions, its not a
   performance problem, it is more a security problem, i don like to have
   somebody looking into my codes and see the company rules.
   >   Is there a way to do that, or the only way is writting my functions in
   C??????
   >
   >   Thanks for any help and regards to all!!!
   >
   >
   >
   > =====================
   > Rodrigo Sakai
   > Database Programmer
   > rodrigo@2bfree.com.br
   > http://www.2bfree.com.br
   > Tel:  (55) (11) 5083-5577
   > Fax: (55) (11) 5549-3598
   > =====================
   >
   >
   > ---------------------------(end of broadcast)---------------------------
   > TIP 9: the planner will ignore your desire to choose an index scan if your
   >       joining column's datatypes do not match
   >
   
   
   
   

3. Re: Compiling pl/pgsql functions

   Stephan Szabo <sszabo@megazone.bigpanda.com> — 2004-02-19T16:20:12Z

   On Thu, 19 Feb 2004, Rodrigo Sakai wrote:
   
   >    Hi, I'm responsable for the database here in the company, and I like
   >    to know if is there a way to compile my pl/pgsql functions, its not a
   >    performance problem, it is more a security problem, i don like to
   >    have somebody looking into my codes and see the company rules.
   
   AFAIK there's not much you can do for obfuscation of pl functions right
   now since someone will be able to see the src text in pg_proc. However,
   are you allowing people that you don't want to see the code access to
   write arbitrary sql to the database?
   
   

4. Re: Compiling pl/pgsql functions

   Rod Taylor <rbt@rbt.ca> — 2004-02-19T16:48:02Z

   > AFAIK there's not much you can do for obfuscation of pl functions right
   > now since someone will be able to see the src text in pg_proc. However,
   > are you allowing people that you don't want to see the code access to
   > write arbitrary sql to the database?
   
   This is another one of those items where it would be nice if users
   didn't need access to read the system tables, but instead could rely on
   the information schema (with extensions) to see what they own or have
   access to use -- but nothing else.
   
   Sometimes HR gets paranoid about billing seeing their business logic, or
   lack thereof, but accounting needs to use both sets of information to do
   their work.
   
   Otherwise, having each group relegated to their own schema with
   semi-public views is a nice way to pass information from department to
   department for small companies. Sure beats the spreadsheets on the
   central filer approach.
   
   -- 
   Rod Taylor <rbt [at] rbt [dot] ca>
   
   Build A Brighter Lamp :: Linux Apache {middleware} PostgreSQL
   PGP Key: http://www.rbt.ca/signature.asc
   

5. Re: Compiling pl/pgsql functions

   Josh Berkus <josh@agliodbs.com> — 2004-02-22T19:34:47Z

   Rod,
   
   > This is another one of those items where it would be nice if users
   > didn't need access to read the system tables, but instead could rely on
   > the information schema (with extensions) to see what they own or have
   > access to use -- but nothing else.
   
   Hmmm, that is a good question: can I, as a database user, query the source 
   code for functions I don't have permissions on?    This seems like an easy 
   adjustment to the system tables, if so.
   
   -- 
   Josh Berkus
   Aglio Database Solutions
   San Francisco