Re: pl/pgsql enabled by default
Neil Conway <neilc@samurai.com>
From: Neil Conway <neilc@samurai.com>
To: Mike Mascari <mascarm@mascari.com>
Cc: Andrew Sullivan <ajs@crankycanuck.ca>, pgsql-hackers@postgresql.org
Date: 2005-05-08T02:05:57Z
Lists: pgsql-hackers
Mike Mascari wrote: > People who use views to achieve row security, which is a rather common > paradigm, cannot allow users to create functions with side effects. Can you elaborate? I'm not sure I follow you. (I'll note anyway that (1) SQL functions can have side effects: CREATE FUNCTION foo() RETURNS VOID AS 'DELETE FROM ...', for example (2) Administrators can always choose to drop pl/pgsql for a particular database, disable it at initdb time, or REVOKE usage of pl/pgsql for particular users.) -Neil