undefined | Better HN

0 pointscryptonector11mo ago0 comments

`pg_logical_emit_message()` is great and better than `NOTIFY` in terms of how it works, but...

`pg_logical_emit_message()` perpetuates/continues the lack of authz around `NOTIFY`.

0 comments

3 comments · 1 top-level

williamdclt11mo ago· 2 in thread

What do you mean by this? What authz would you expect/like?

cryptonectorOP11mo ago

I'd like to say that only some roles can NOTIFY to some channels. Similarly for alternatives to LISTEN/NOTIFY.

williamdclt11mo ago

Right. It’s not something I’ve had to handle, I’ve always worked in environments where db clients are well behaved and under my control, what’s your use case out of interest?

1 more reply

j / k navigate · click thread line to collapse