aboutsummaryrefslogtreecommitdiff
path: root/doc/src
diff options
context:
space:
mode:
authorPeter Eisentraut <peter@eisentraut.org>2019-02-21 19:49:27 +0100
committerPeter Eisentraut <peter@eisentraut.org>2019-02-21 19:49:27 +0100
commit213eae9b8a8a6b2ce3b0e5f5dc86d4b267096398 (patch)
treea22511058207592ab7ebc38ac51bc6ebd578ef59 /doc/src
parent1995552deb5479a50ec9044f0179f906ff7772e0 (diff)
downloadpostgresql-213eae9b8a8a6b2ce3b0e5f5dc86d4b267096398.tar.gz
postgresql-213eae9b8a8a6b2ce3b0e5f5dc86d4b267096398.zip
doc: Add security information about pg_stat_activity
Add a basic note that some columns in pg_stat_activity and related views are not visible to all users. Discussion: https://www.postgresql.org/message-id/3018acd9-e5d8-1e85-5ed7-47276cd77569%402ndquadrant.com
Diffstat (limited to 'doc/src')
-rw-r--r--doc/src/sgml/monitoring.sgml12
1 files changed, 12 insertions, 0 deletions
diff --git a/doc/src/sgml/monitoring.sgml b/doc/src/sgml/monitoring.sgml
index 5c1408bdf5e..0e73cdcddab 100644
--- a/doc/src/sgml/monitoring.sgml
+++ b/doc/src/sgml/monitoring.sgml
@@ -268,6 +268,18 @@ postgres 27093 0.0 0.0 30096 2752 ? Ss 11:34 0:00 postgres: ser
stated above; instead they update continuously throughout the transaction.
</para>
+ <para>
+ Some of the information in the dynamic statistics views shown in <xref
+ linkend="monitoring-stats-dynamic-views-table"/> is security restricted.
+ Ordinary users can only see all the information about their own sessions
+ (sessions belonging to a role that they are a member of). In rows about
+ other sessions, many columns will be null. Note, however, that the
+ existence of a session and its general properties such as its sessions user
+ and database are visible to all users. Superusers and members of the
+ built-in role <literal>pg_read_all_stats</literal> (see also <xref
+ linkend="default-roles"/>) can see all the information about all sessions.
+ </para>
+
<table id="monitoring-stats-dynamic-views-table">
<title>Dynamic Statistics Views</title>