public inbox for [email protected]
help / color / mirror / Atom feedFrom: David G. Johnston <[email protected]>
To: Ayush Vatsa <[email protected]>
Cc: [email protected]
Subject: Re: Clarification on View Privileges and Operator Execution in PostgreSQL
Date: Sun, 7 Apr 2024 09:37:46 -0700
Message-ID: <CAKFQuwYGKAeohDYe9m7ZBwto8wOc1G20dZxUJVv-aNh6St-CRg@mail.gmail.com> (raw)
In-Reply-To: <CACX+KaMxg+WiHuQHA8==BmP0jsVFXm-RKnAd1bhF=yFYopP4Pg@mail.gmail.com>
References: <CACX+KaN-Lqv+k6d4b37oKFiqF6ibMkq1RVHbcTby5EjRtNQewg@mail.gmail.com>
<CAKFQuwbMkum2q05EvhVNWXC4ij-HL-Nv=3d5yDPfZsEhNTrJbQ@mail.gmail.com>
<CACX+KaMxg+WiHuQHA8==BmP0jsVFXm-RKnAd1bhF=yFYopP4Pg@mail.gmail.com>
On Sun, Apr 7, 2024 at 9:32 AM Ayush Vatsa <[email protected]> wrote:
> > Functions in the view are executed with the privileges of the user
> executing the query or the function owner
> So does that imply to the function associated with the operators (both
> builtin and user defined) too.
> Basically wanted to know about this -
> > Now table x will be accessed (SELECT * FROM x) with
> "postgres" privileges but who will execute the
> > underlying function inside the ( > ) operator ? Is it postgres or alex?
>
>>
>>
An operator is a function invocation with special syntax. So I expect that
sentence to apply.
If you want to confirm what the documentation says create a custom
operator/function that alex is not permitted to execute and have them query
a view defined by postgres that uses that function.
David J.
view thread (3+ messages)
reply
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: [email protected]
Cc: [email protected], [email protected], [email protected]
Subject: Re: Clarification on View Privileges and Operator Execution in PostgreSQL
In-Reply-To: <CAKFQuwYGKAeohDYe9m7ZBwto8wOc1G20dZxUJVv-aNh6St-CRg@mail.gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox