Hi Daniel
On 27.09.23 10:21, Daniel Gustafsson wrote:
An annotation syntax specifically for this would address my concern,
but the
argument that pg_hba (and related code) is border-line too complicated as it is
does hold some water. Complexity in code can lead to bugs, but complexity in
syntax can lead to misconfigurations or unintentional infosec leaks which is
usually more problematic.
Yeah, that's why the possibility to use the normal comments for this
feature seemed at first so appealing :)
I would propose to not worry about code and instead just discuss a potential
new format for annotations, and only implement parsing and handling once
something has been agreed upon. This should be in a new thread however to
ensure visibility, since it's beyond the subject of this thread.
Sounds good! I will open a new thread as soon as I get back home, so
that we can collect some ideas.
Thanks
Jim
