[pgpool-general: 8879] Re: restrictions for pgpool set/show commands

[michail alexakis]

Hello Tatsuo,

I realized that only a small subset of values can be changed, and also this
change will be session-local.
I did not see it initially (in documentation for PGPOOL_SET page), but
section 5.1 (
https://www.pgpool.net/docs/43/en/html/config-setting.html#CONFIG-SETTING-SQL-COMMAND-INTERACTION)
states it clearly.
So, i dont think there is a problem!

Thanks for your help,
Michail


On Fri, Jul 7, 2023 at 3:56 PM Tatsuo Ishii <ishii at sraoss.co.jp> wrote:

> > Hello Pgpool team
> >
> > Is it possible to place any restrictions on which users may execute a
> > PGPOOL SET/SHOW command?
>
> No.
>
> > As far as I understand, a normal unprivileged user
> > (capable of establishing a session with Pgpool frontend) may send a
> similar
> > command.
>
> Yes.
>
> > In the case of PGPOOL SET, a user may alter significant parts of
> > the server configuration (which seems to me like more powerful than I
> would
> > expect).
>
> Below are the configuration parameters PGPOOL SET can change its value
> in the session. Do you have any concern here?
>
>                 {"log_statement", CFGCXT_SESSION, LOGGING_CONFIG,
>                 {"log_per_node_statement", CFGCXT_SESSION, LOGGING_CONFIG,
>                 {"log_client_messages", CFGCXT_SESSION, LOGGING_CONFIG,
>                 {"check_unlogged_table", CFGCXT_SESSION, GENERAL_CONFIG,
>                 {"allow_sql_comments", CFGCXT_SESSION, LOAD_BALANCE_CONFIG,
>                 {"client_idle_limit", CFGCXT_SESSION,
> CONNECTION_POOL_CONFIG,
>                 {"client_idle_limit_in_recovery", CFGCXT_SESSION,
> RECOVERY_CONFIG,
>                 {"log_error_verbosity", CFGCXT_SESSION, LOGGING_CONFIG,
>                 {"client_min_messages", CFGCXT_SESSION, LOGGING_CONFIG,
>                 {"log_min_messages", CFGCXT_SESSION, LOGGING_CONFIG,
>
> Best reagards,
> --
> Tatsuo Ishii
> SRA OSS LLC
> English: http://www.sraoss.co.jp/index_en/
> Japanese:http://www.sraoss.co.jp
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.pgpool.net/pipermail/pgpool-general/attachments/20230707/64a731d2/attachment.htm>