pg.ddx.io pgsql-admin@postgresql.org mailing list archive
help / color / mirror / Atom feedSecurity definer function to alter a sequence
4+ messages / 3 participants
[nested] [flat]
* Security definer function to alter a sequence
@ 2025-02-11 21:53 Sbob <sbob@quadratum-braccas.com>
2025-02-11 21:57 ` Re: Security definer function to alter a sequence David G. Johnston <david.g.johnston@gmail.com>
0 siblings, 1 reply; 4+ messages in thread
From: Sbob @ 2025-02-11 21:53 UTC (permalink / raw)
To: pgsql-admin@lists.postgresql.org
All;
Can I create a security definer function to alter a sequence value? Or
is this considered DDL (and thus a security definer function os not
allowed to run it)?
Thanks in advance
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: Security definer function to alter a sequence
2025-02-11 21:53 Security definer function to alter a sequence Sbob <sbob@quadratum-braccas.com>
@ 2025-02-11 21:57 ` David G. Johnston <david.g.johnston@gmail.com>
2025-02-11 22:57 ` Re: Security definer function to alter a sequence Sbob <sbob@quadratum-braccas.com>
0 siblings, 1 reply; 4+ messages in thread
From: David G. Johnston @ 2025-02-11 21:57 UTC (permalink / raw)
To: Sbob <sbob@quadratum-braccas.com>; +Cc: pgsql-admin@lists.postgresql.org
On Tue, Feb 11, 2025 at 2:53 PM Sbob <sbob@quadratum-braccas.com> wrote:
>
> Can I create a security definer function to alter a sequence value? Or
> is this considered DDL (and thus a security definer function os not
> allowed to run it)?
>
>
What makes you think it being DDL makes any difference?
David J.
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: Security definer function to alter a sequence
2025-02-11 21:53 Security definer function to alter a sequence Sbob <sbob@quadratum-braccas.com>
2025-02-11 21:57 ` Re: Security definer function to alter a sequence David G. Johnston <david.g.johnston@gmail.com>
@ 2025-02-11 22:57 ` Sbob <sbob@quadratum-braccas.com>
2025-02-12 07:36 ` Re: Security definer function to alter a sequence Laurenz Albe <laurenz.albe@cybertec.at>
0 siblings, 1 reply; 4+ messages in thread
From: Sbob @ 2025-02-11 22:57 UTC (permalink / raw)
To: David G. Johnston <david.g.johnston@gmail.com>; +Cc: pgsql-admin@lists.postgresql.org
I thought that DDL calls in a security definer function were blocked. I
may be confused
On 2/11/25 2:57 PM, David G. Johnston wrote:
> On Tue, Feb 11, 2025 at 2:53 PM Sbob <sbob@quadratum-braccas.com> wrote:
>
>
> Can I create a security definer function to alter a sequence
> value? Or
> is this considered DDL (and thus a security definer function os not
> allowed to run it)?
>
>
> What makes you think it being DDL makes any difference?
>
> David J.
>
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: Security definer function to alter a sequence
2025-02-11 21:53 Security definer function to alter a sequence Sbob <sbob@quadratum-braccas.com>
2025-02-11 21:57 ` Re: Security definer function to alter a sequence David G. Johnston <david.g.johnston@gmail.com>
2025-02-11 22:57 ` Re: Security definer function to alter a sequence Sbob <sbob@quadratum-braccas.com>
@ 2025-02-12 07:36 ` Laurenz Albe <laurenz.albe@cybertec.at>
0 siblings, 0 replies; 4+ messages in thread
From: Laurenz Albe @ 2025-02-12 07:36 UTC (permalink / raw)
To: Sbob <sbob@quadratum-braccas.com>; David G. Johnston <david.g.johnston@gmail.com>; +Cc: pgsql-admin@lists.postgresql.org
On Tue, 2025-02-11 at 15:57 -0700, Sbob wrote:
> I thought that DDL calls in a security definer function were blocked. I may be confused
I think you are. I am not aware of anything that is forbidden in a SECURITY DEFINER
function. On the contrary - people usually use them to perform activities that the
calling user is not allowed to do.
Don't forget to set a "search_path" on all SECURITY DEFINER functions.
Yours,
Laurenz Albe
--
*E-Mail Disclaimer*
Der Inhalt dieser E-Mail ist ausschliesslich fuer den
bezeichneten Adressaten bestimmt. Wenn Sie nicht der vorgesehene Adressat
dieser E-Mail oder dessen Vertreter sein sollten, so beachten Sie bitte,
dass jede Form der Kenntnisnahme, Veroeffentlichung, Vervielfaeltigung oder
Weitergabe des Inhalts dieser E-Mail unzulaessig ist. Wir bitten Sie, sich
in diesem Fall mit dem Absender der E-Mail in Verbindung zu setzen.
*CONFIDENTIALITY NOTICE & DISCLAIMER
*This message and any attachment are
confidential and may be privileged or otherwise protected from disclosure
and solely for the use of the person(s) or entity to whom it is intended.
If you have received this message in error and are not the intended
recipient, please notify the sender immediately and delete this message and
any attachment from your system. If you are not the intended recipient, be
advised that any use of this message is prohibited and may be unlawful, and
you must not copy this message or attachment or disclose the contents to
any other person.
^ permalink raw reply [nested|flat] 4+ messages in thread
end of thread, other threads:[~2025-02-12 07:36 UTC | newest]
Thread overview: 4+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2025-02-11 21:53 Security definer function to alter a sequence Sbob <sbob@quadratum-braccas.com>
2025-02-11 21:57 ` David G. Johnston <david.g.johnston@gmail.com>
2025-02-11 22:57 ` Sbob <sbob@quadratum-braccas.com>
2025-02-12 07:36 ` Laurenz Albe <laurenz.albe@cybertec.at>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox