Horton
Menu

Re: PoC: Make it possible to disallow WHERE-less UPDATE and DELETE

Jim Mlodgenski <jimmy76@gmail.com>

View thread
From: Jim Mlodgenski <jimmy76@gmail.com>
To: David Fetter <david@fetter.org>
Cc: PostgreSQL Development <pgsql-hackers@postgresql.org>
Date: 2016-07-21T13:21:55Z
Lists: pgsql-hackers 
On Thu, Jul 21, 2016 at 12:57 AM, David Fetter <david@fetter.org> wrote:

> Folks,
>
> Please find attached a patch which makes it possible to disallow
> UPDATEs and DELETEs which lack a WHERE clause.  As this changes query
> behavior, I've made the new GUCs PGC_SUSET.
>
> What say?
>
>
Can't you implement this as a extension? The SQL Firewall project is
already doing some similar concepts by catching prohibiting SQL and
preventing it from executing.
https://github.com/uptimejp/sql_firewall