From 822c9aad229fd18ccaefa02f620085aab0382f19 Mon Sep 17 00:00:00 2001 From: Joe Nelson Date: Sun, 2 Nov 2014 00:23:24 -0700 Subject: [PATCH] Cannot use query param for set role. Concat should be safe though --- src/PgQuery.hs | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/PgQuery.hs b/src/PgQuery.hs index 0bf3fdd38..19fa3cf06 100644 --- a/src/PgQuery.hs +++ b/src/PgQuery.hs @@ -23,7 +23,7 @@ import Data.Maybe (fromMaybe, mapMaybe) import Data.Monoid ((<>), mconcat) import qualified Data.Map as M -import Control.Monad (join, void) +import Control.Monad (join) import qualified RangeQuery as R import qualified Data.ByteString.Char8 as BS @@ -239,7 +239,7 @@ populateSql conn sql = do ph = intercalate ", " . map (const "?::varchar") setRole :: Connection -> DbRole -> IO () -setRole conn role = void $ run conn "set role ?" [toSql role] +setRole conn role = runRaw conn $ "set role " <> cs role resetRole :: Connection -> IO () resetRole conn = runRaw conn "reset role"