Re: [GENERAL] Postgres Security Checklist

2009-04-06 Thread Albe Laurenz
Tom Lane wrote: > > Here is my personal security checklist for PostgreSQL: > > > - Check that there is no SQL function with SECURITY DEFINER. > > Uh, that seems a pretty strange restriction. Generally, if you are > actually concerned about security at the SQL-command level, you're > going to hav

Re: [GENERAL] Postgres Security Checklist

2009-04-06 Thread Tom Lane
"Albe Laurenz" writes: > Here is my personal security checklist for PostgreSQL: > - Check that there is no SQL function with SECURITY DEFINER. Uh, that seems a pretty strange restriction. Generally, if you are actually concerned about security at the SQL-command level, you're going to have to h

Re: [GENERAL] Postgres Security Checklist

2009-04-06 Thread Albe Laurenz
Eduardo Henrique wrote: > Hi, I'm developing a Graduation Work about Database security. > My idea is develop an application that connect in an database > (in this case Postgres) and make some security verification > of that db. The problem is that my verification only can be > in a dabatase sco