Re: [HACKERS] Submission Review: User control over psql error stream

2012-12-28 Thread Alastair Turner
Hi Karl, Sorry for the slow reply ... Excerpt from Karl O. Pinc On Mon, Dec 10, 2012 at 5:00 AM: > I was thinking along the same lines, that case 2) stderr to a file > or pipe needs addressing. I think it's necessary to address the > issue now. Otherwise we risk cluttering up the syntax in >

Re: [HACKERS] A stab at implementing better password hashing, with mixed results

2012-12-28 Thread Alastair Turner
On Thu, Dec 27, 2012 at 5:39 PM, Peter Bex wrote: > On Thu, Dec 27, 2012 at 12:31:08PM -0300, Claudio Freire wrote: >> On Thu, Dec 27, 2012 at 11:46 AM, Peter Bex wrote: >> > >> > Implementing a more secure challenge-response based algorithm means >> > a change in the client-server protocol. Per

[HACKERS] Submission Review: User control over psql error stream

2012-12-09 Thread Alastair Turner
Hi Karl, I have given the patch a quick review and read the related mails following its initial submission. I agree with that functionality along these lines is desirable. The ability to manage output from within psql at least as richly as is possible with shell redirection - and change it betwee

[HACKERS] Patch for checking file parameters to psql before password prompt

2012-12-02 Thread Alastair Turner
Patch for the changes discussed in http://archives.postgresql.org/pgsql-hackers/2010-10/msg00919.php attached (eventually ...) In summary: If the input file (-f) doesn't exist or the ouput or log files (-o and -l) can't be created psql exits before prompting for a password. Regards, Alastair.

Re: [HACKERS] \conninfo and SSL

2012-06-03 Thread Alastair Turner
On Thu, May 31, 2012 at 9:11 PM, Magnus Hagander wrote: > On Thu, May 31, 2012 at 9:04 PM, Bruce Momjian wrote: >> On startup, psql shows the SSL information: >> >>        $ psql 'sslmode=require host=localhost' >>        psql (9.2beta1) >>        SSL connection (cipher: DHE-RSA-AES256-SHA, bits:

Re: [HACKERS] [RFC] Interface of Row Level Security

2012-05-27 Thread Alastair Turner
Excerpts from Kohei KaiGai wrote on Fri, May 25, 2012 at 11:08 PM: > If we assume RLS is applied when user has > no privileges on tables, the current ExecCheckRTEPerms() > always raises an error towards unprivileged users, prior to > execution of queries. > Isn't it preferable behavior to allow un

Re: [HACKERS] [RFC] Interface of Row Level Security

2012-05-23 Thread Alastair Turner
On Wed, May 23, 2012 at 5:09 PM, Tom Lane wrote: > Kohei KaiGai writes: >> Let me have a discussion to get preferable interface for row-level security. >> My planned feature will perform to append additional conditions to WHERE >> clause implicitly, to restrict tuples being visible for the curren

[HACKERS] Copy/paste from psql - was: Changing the continuation-line prompt in psql?

2011-04-30 Thread Alastair Turner
On Fri, Apr 29, 2011 at 8:11 PM, Tom Lane wrote: > Greg Stark writes: >> On Fri, Apr 29, 2011 at 5:45 PM, Christopher Browne >> wrote: >>> The "bike shedding" that I'd rather have would involve enclosing >>> prompts with /* comments */ so that cut'n'paste could be expected to >>> generate outpu

Re: [HACKERS] superusers are members of all roles?

2011-04-07 Thread Alastair Turner
On Thu, Apr 7, 2011 at 6:49 AM, Andrew Dunstan wrote: > > On 04/07/2011 12:29 AM, Tom Lane wrote: >> >> Robert Haas  writes: >>> >>> On Wed, Apr 6, 2011 at 7:54 PM, Stephen Frost  wrote: * Andrew Dunstan (and...@dunslane.net) wrote: > > The surprising (to me) consequence was that

Re: [HACKERS] DELETE with LIMIT (or my first hack)

2010-11-30 Thread Alastair Turner
On Tue, Nov 30, 2010 at 9:24 PM, Marko Tiikkaja wrote: >> On 11/30/2010 02:12 PM, Kevin Grittner wrote: >>> >>> Daniel Loureiro   wrote: >>> to me the key its security - its a anti-DBA-with-lack-of-attention feature. >>> >>> Well, it seems pretty weak to me for that purpose.  You still t

Re: [HACKERS] First patch proposal

2010-10-14 Thread Alastair Turner
Excerpt from Hitoshi Harada - Thu, Oct 14, 2010 at 4:32 PM: > Just for information, did you pick this topic from TODO > list? If so, could you attach links to the entry or to some related > former thread? And in general it is encouraged that you'd better send > one feature per a patch, in order fo

Re: [HACKERS] First patch proposal

2010-10-14 Thread Alastair Turner
On Thu, Oct 14, 2010 at 4:05 PM, Tom Lane wrote: > Alastair Turner writes: >> I am proposing altering psql to raise certain errors and exit before >> prompting for a password. These errors would have to be on items which >> didn't leak any information, my current lis

[HACKERS] First patch proposal

2010-10-14 Thread Alastair Turner
Hi I am a keen Postgres user and I run my local PUG (JNBPUG in Gauteng, South Africa), but I have found the idea of contributing on a code level daunting. Having read the many warnings along the lines of "It's still on the todo because it isn't trivial" I have identified what I believe is a manag

Re: [HACKERS] Synchronization levels in SR

2010-05-26 Thread Alastair Turner
A suggestion, based on what I believe would be ideal default settings for a fully developed SR capability. The thought being that as long as the default behaviour was stable additional knobs could be added across version boundaries without causing trouble. Per slave the master needs to know: - Th

Re: [HACKERS] Synchronization levels in SR

2010-05-25 Thread Alastair Turner
On Tue, May 25, 2010 at 6:28 PM, Simon Riggs wrote: ... > > The best parameter we can specify is the number of servers that we wish > to wait for confirmation from. That is a definition that easily manages > the complexity of having various servers up/down at any one time. It > also survives m

Re: [HACKERS] SQL compatibility reminder: MySQL vs PostgreSQL

2010-03-05 Thread Alastair Turner
2010/3/5 François Pérou : > Thanks for your answers. > > To speak frankly: > > * I wrote the Drupal guide for porting from MySQL to PostgreSQL. > > * I am also the author of remarks about people should use PostgreSQL to > write portable SQL. > > * I am very surprised by the SQL level of Php develop

Re: [HACKERS] Review: listagg aggregate

2010-01-26 Thread Alastair Turner
On Tue, Jan 26, 2010 at 1:23 PM, Alastair Turner wrote: > . > > Given that it potentially produces a delimited list, not a straight > conacatenation (and that list is unacceptable since it would be > descriptive as a noun but not as a verb) would implode_agg not be the > mos

Re: [HACKERS] Review: listagg aggregate

2010-01-26 Thread Alastair Turner
On Tue, Jan 26, 2010 at 1:08 PM, David E. Wheeler wrote: . > > Because it's an aggregate that cocatenates values. It's not an aggregate > that lists things. I also like concat_agg better than string_agg because > it's not limited to acting on strings. > . Given that it potentially prod