I have a single postgres database, with two users; Alice and Bob.
I would like to be able to do a
NOTIFY alice_channel 'sensitive data' without Bob being able to sneakily
LISTEN in just by guessing that the channel name is 'alice_channel'.
In practice the channel names are very hard to guess, but this is security through obscurity at best.
Am I correct in believing that there is no way to prevent a database user from using (abusing)
NOTIFY? i.e. there does not appear to be any associated privileges that can be granted or revoked.
Is this a dead end?