cartodb/cartodb-postgresql
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
user-defined-fdw-no-sec-definer
cartodb-postgresql/scripts-available
History
Rafa de la Torre 67663c79aa Check removal of SECURITY DEFINER 
This is just a test to see how feasible is to remove the SECURITY
DEFINER and have regular users setup their FDW.

There are still problems with this approach:
- need to grant the usage of postgres_fdw (no big issue)
- need CREATEROLE privilege. A problem in itself (see the NOTES
https://www.postgresql.org/docs/current/sql-createrole.html)

Aside from those, there are still practical problems:
```
> Executing query 'SELECT cartodb.CDB_SetUp_User_Foreign_Server('test_user_fdw', '{
   "server": {
     "extensions": "postgis",
     "dbname": "fdw_target",
     "host": "localhost",
     "port": 5432
   },
   "user_mapping": {
     "user": "fdw_user",
     "password": "foobarino"
   }
}');' as cdb_testmember_1
ERROR:  permission denied for foreign-data wrapper postgres_fdw
CONTEXT:  SQL statement "ALTER SERVER test_user_fdw OWNER TO test_user_fdw"
PL/pgSQL function cdb_setup_user_foreign_server(name,json) line 32 at EXECUTE
```
2019-07-15 15:50:33 +02:00
..
CDB_AnalysisCatalog.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_AnalysisCheck.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_AnalysisSupport.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_CartodbfyTable.sql Order the columns of a cartodbfied table consistently 2019-07-03 16:16:37 +02:00
CDB_ColumnNames.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_ColumnType.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_Conf.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_DateToNumber.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_DDLTriggers.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_DigitSeparator.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_DistinctMeasure.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_DistType.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_EqualIntervalBins.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_EstimateRowCount.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_ExtensionPost.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_ExtensionUtils.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_ForeignTable.sql Check removal of SECURITY DEFINER 2019-07-15 15:50:33 +02:00
CDB_GhostTables.sql add CREATE/ALTER/DROP FOREIGN TABLE to ddl commands 2019-06-20 11:20:48 +02:00
CDB_GreatCircle.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_Groups_API.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_Groups.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_HeadsTailsBins.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_Helper.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_Hexagon.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_JenksBins.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_LatLng.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_Math.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_Organizations.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_Overviews.sql Add missing qualifications 2019-06-03 15:22:52 +02:00
CDB_OverviewsSupport.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_QuantileBins.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_QueryStatements.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_QueryTables.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_Quota.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_RandomTids.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_RectangleGrid.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_SearchPath.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_Stats.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_StringToDate.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_SyncTable.sql Fix cases of double-quoting identifiers 2019-07-04 12:47:58 +02:00
CDB_TableIndexes.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_TableMetadata.sql Add missing qualifications 2019-06-03 15:22:52 +02:00
CDB_TransformToWebmercator.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_Username.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_UserTables.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_XYZ.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00
CDB_ZoomFromScale.sql Fully qualify function calls 2019-05-31 15:37:15 +02:00