undefined | Better HN

0 pointscryptonector8mo ago0 comments

`pg_logical_emit_message()` is great and better than `NOTIFY` in terms of how it works, but...

`pg_logical_emit_message()` perpetuates/continues the lack of authz around `NOTIFY`.

0 comments

williamdclt8mo ago

What do you mean by this? What authz would you expect/like?

cryptonectorOP8mo ago

I'd like to say that only some roles can NOTIFY to some channels. Similarly for alternatives to LISTEN/NOTIFY.

williamdclt8mo ago

Right. It’s not something I’ve had to handle, I’ve always worked in environments where db clients are well behaved and under my control, what’s your use case out of interest?

1 more reply

j / k navigate · click thread line to collapse

0 pointscryptonector8mo ago0 comments

`pg_logical_emit_message()` is great and better than `NOTIFY` in terms of how it works, but...

`pg_logical_emit_message()` perpetuates/continues the lack of authz around `NOTIFY`.

0 comments

williamdclt8mo ago

What do you mean by this? What authz would you expect/like?

cryptonectorOP8mo ago

I'd like to say that only some roles can NOTIFY to some channels. Similarly for alternatives to LISTEN/NOTIFY.

williamdclt8mo ago

Right. It’s not something I’ve had to handle, I’ve always worked in environments where db clients are well behaved and under my control, what’s your use case out of interest?

1 more reply

j / k navigate · click thread line to collapse