Re: BUG #4074: Using SESSION_USER or CURRENT_USER in a view definition is unsafe

["Dave Page" <dpage(at)pgadmin(dot)org>]

On Mon, Mar 31, 2008 at 10:46 PM, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> wrote:
>  If this were a security issue, you already spilled the beans by
>  reporting it to a public mailing list; so I'm unsure what you are
>  concerned about.

I'd wager that Lars didn't realise the bug form goes straight to the
list. We should probably make that more clear.

On the other hand it does say to report security issues to security(at)(dot)(dot)(dot)


-- 
Dave Page
EnterpriseDB UK Ltd: http://www.enterprisedb.com
PostgreSQL UK 2008 Conference: http://www.postgresql.org.uk