Jim C. Nasby jnasby
Thu Feb 23 12:50:54 PST 2006
On Thu, Feb 23, 2006 at 07:02:09AM -0500, Andrew Sullivan wrote:
> On Thu, Feb 23, 2006 at 08:00:58PM +1100, Gavin Sherry wrote:
> > 
> > CREATE DATABASE does touch system catalogs. But it is the same catalog in
> > *all databases*. There might be triggers on pg_database in a number of
> > databases but how do we invoke them?
> 
> Indeed.  And even if you solve that, what are the security
> implications of it?  It seems to me this is just a giant vector for
> inter-database attacks.

Ok, so worst case we punt for now and don't support triggers on
pg_database. Triggers on some catalog tables/system events is far better
than triggers on none...
-- 
Jim C. Nasby, Sr. Engineering Consultant      jnasby at pervasive.com
Pervasive Software      http://pervasive.com    work: 512-231-6117
vcard: http://jim.nasby.net/pervasive.vcf       cell: 512-569-9461



More information about the Slony1-general mailing list