MIME-Version: 1.0
In-Reply-To: <CAEzWdqfqr9e3OpFd5Nhqha3Ggm=+UJdWkgvo7dpAa3W99S2g5Q@mail.gmail.com>
References: <CAEzWdqcimp5dnNOavaSkMCOKW_FVsKC2101g=dFsyjQ-9dA3uw@mail.gmail.com>
 <CAKFQuwa+jpZ-pucWc92OCYcwCnj7C_POg8k=5BvbPZyL97R-Jw@mail.gmail.com> <CAEzWdqfqr9e3OpFd5Nhqha3Ggm=+UJdWkgvo7dpAa3W99S2g5Q@mail.gmail.com>
From: "David G. Johnston" <david.g.johnston@gmail.com>
Date: Sun, 21 Apr 2024 07:25:14 -0700
Message-ID: <CAKFQuwYu8w7BMX_9xEP1t5ULT7pV-qO1Yotn1qtdMuEpWCqhFg@mail.gmail.com>
Subject: Re: error in trigger creation
To: yudhi s <learnerdatabase99@gmail.com>
Cc: pgsql-general <pgsql-general@lists.postgresql.org>
Content-Type: multipart/alternative; boundary="000000000000de585d06169c1620"
Archived-At: <https://www.postgresql.org/message-id/CAKFQuwYu8w7BMX_9xEP1t5ULT7pV-qO1Yotn1qtdMuEpWCqhFg%40mail.gmail.com>
Precedence: bulk

--000000000000de585d06169c1620
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Sunday, April 21, 2024, yudhi s <learnerdatabase99@gmail.com> wrote:

> On Sun, Apr 21, 2024 at 1:55=E2=80=AFPM David G. Johnston <
> david.g.johnston@gmail.com> wrote:
>
>> On Sunday, April 21, 2024, yudhi s <learnerdatabase99@gmail.com> wrote:
>>
>>> so that it will be able to assign the privilege, so we will be able to
>>> create the event trigger without need to run the event trigger script f=
rom
>>> super user itself?
>>>
>>
>> Write a security-definer function owned by superuser and grant app_user
>> permission to execute it.
>>
>> David J.
>>
>>
>
> Thank You David.
>
>  Are you saying something like below, in which we first create the
> function from super user and then execute the grant? But doesn't that mea=
n,
> each time we want to create a new event trigger we have to be again
> dependent on the "super user" to modify the security definer function?
>

Dynamic SQL.  See =E2=80=9Cexecute=E2=80=9D in plpgsql.

David J.

--000000000000de585d06169c1620
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Sunday, April 21, 2024, yudhi s &lt;<a href=3D"mailto:learnerdatabase99@=
gmail.com">learnerdatabase99@gmail.com</a>&gt; wrote:<br><blockquote class=
=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padd=
ing-left:1ex"><div dir=3D"ltr"><div dir=3D"ltr">On Sun, Apr 21, 2024 at 1:5=
5=E2=80=AFPM David G. Johnston &lt;<a href=3D"mailto:david.g.johnston@gmail=
.com" target=3D"_blank">david.g.johnston@gmail.com</a>&gt; wrote:<br></div>=
<div class=3D"gmail_quote"><blockquote class=3D"gmail_quote" style=3D"margi=
n:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex=
">On Sunday, April 21, 2024, yudhi s &lt;<a href=3D"mailto:learnerdatabase9=
9@gmail.com" target=3D"_blank">learnerdatabase99@gmail.com</a>&gt; wrote:<b=
r><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;borde=
r-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr">so tha=
t it will be able to assign the privilege, so we will be able to create the=
 event trigger without need to run the event trigger script from super user=
 itself?</div></blockquote><div><br></div><div>Write a security-definer fun=
ction owned by superuser and grant app_user permission to execute it.</div>=
<div><br></div><div>David J.</div><div>=C2=A0</div></blockquote><div><br></=
div><div>Thank You David.</div><div><br></div>=C2=A0Are you saying somethin=
g like below, in which we first create the function from super user and the=
n execute the grant? But doesn&#39;t that mean, each time we want to create=
 a new event trigger we have to be again dependent on the &quot;super user&=
quot; to modify the security definer function?</div></div></blockquote><div=
><br></div><div>Dynamic SQL.=C2=A0 See =E2=80=9Cexecute=E2=80=9D in plpgsql=
.</div><div><br></div><div>David J.</div><div>=C2=A0</div>

--000000000000de585d06169c1620--