Thanks to visit codestin.com
Credit goes to postgrespro.com

Re: debugger from superuser only.... why? - Mailing list pgsql-general

From Tom Lane
Subject Re: debugger from superuser only.... why?
Date
Msg-id [email protected]
Whole thread Raw
In response to Re: debugger from superuser only.... why?  (Alexander Petrossian <[email protected]>)
Responses Re: debugger from superuser only.... why?
List pgsql-general
Alexander Petrossian <[email protected]> writes:
>>> I am wondering why is this, why not allow debugging for non-privileged users?

Seems obvious to me that it'd be a nasty security hole, ie you could
take control of somebody else's session and make it do things you
don't have permissions for.  Even if there's a way to restrict
debugging connections to sessions owned by the same user, you'd
have a big problem with being able to change the behavior of
security-definer functions.  Clearly, the authors of pldebugger
decided that was a can of worms they didn't care to open.

            regards, tom lane



pgsql-general by date:

Previous
From: Luca Ferrari
Date:
Subject: Re: debugger from superuser only.... why?
Next
From: Brad White
Date:
Subject: Move from v9.4 to v15