4 ms·

`pg_logical_emit_message()` is great and better than `NOTIFY` in terms of how it works, but... `pg_logical_emit_message()` perpetuates/continues the lack of au

`pg_logical_emit_message()` is great and better than `NOTIFY` in terms of how it works, but... `pg_logical_emit_message()` perpetuates/continues the lack of authz around `NOTIFY`.

williamdclt 1y ago
What do you mean by this? What authz would you expect/like?
- cryptonector 1y ago
  I'd like to say that only some roles can NOTIFY to some channels. Similarly for alternatives to LISTEN/NOTIFY.
  - williamdclt 1y ago
    Right. It’s not something I’ve had to handle, I’ve always worked in environments where db clients are well behaved and under my control, what’s your use case out of interest?
    - cryptonector 1y ago
      Security in depth. If I have to give someone login access, I should be able to control what they do.