Karsten Hilbert <Karsten.Hilbert@xxxxxxx> writes: > On Tue, Mar 28, 2017 at 09:47:40AM -0700, Paul Jungwirth wrote: >> I wrote a blog post about the Postgres permissions system, and I thought I'd >> share: >> http://illuminatedcomputing.com/posts/2017/03/postgres-permissions/ > Not that I am an expert in any way but here's a thought on > why a permission on foreign key creation might be useful: > Being able to create foreign keys may allow to indirectly > discover whether certain values exists in a table which I > don't otherwise have access to (by means of failure or > success to create a judiciously crafted FK). Aside from that, an FK can easily be used to cause effective denial-of-service, for example preventing rows from being deleted within a table, or adding enormous overhead to such a deletion. regards, tom lane -- Sent via pgsql-general mailing list (pgsql-general@xxxxxxxxxxxxxx) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-general
