MIME-Version: 1.0
In-Reply-To: <CAFCRh--0j77ueun+Ak0vRe_vi__Jks_HZjD9QbD+THR8gAWvRQ@mail.gmail.com>
References: <CAFCRh--0j77ueun+Ak0vRe_vi__Jks_HZjD9QbD+THR8gAWvRQ@mail.gmail.com>
From: "David G. Johnston" <david.g.johnston@gmail.com>
Date: Wed, 26 Jun 2024 05:42:21 -0700
Message-ID: <CAKFQuwbnK-gEL=LrtMpkvGGSHCdwhSvDgcJCu6QNj-6rquGRtQ@mail.gmail.com>
Subject: Re: current_role of caller of a DEFINER function
To: Dominique Devienne <ddevienne@gmail.com>
Cc: "pgsql-general@lists.postgresql.org" <pgsql-general@lists.postgresql.org>
Content-Type: multipart/alternative; boundary="000000000000704ee8061bca58b3"
Archived-At: <https://www.postgresql.org/message-id/CAKFQuwbnK-gEL%3DLrtMpkvGGSHCdwhSvDgcJCu6QNj-6rquGRtQ%40mail.gmail.com>
Precedence: bulk

--000000000000704ee8061bca58b3
Content-Type: text/plain; charset="UTF-8"

On Wednesday, June 26, 2024, Dominique Devienne <ddevienne@gmail.com> wrote:

> Only session_user
> is representative of the caller, and reliable (modulo SUPERUSER and
> SET AUTHORIZATION, but that's a different story and kinda normal)
>

Why can you not use session_user then?

David J.

--000000000000704ee8061bca58b3
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Wednesday, June 26, 2024, Dominique Devienne &lt;<a href=3D"mailto:ddevi=
enne@gmail.com">ddevienne@gmail.com</a>&gt; wrote:<br><blockquote class=3D"=
gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-=
left:1ex">Only session_user<br>
is representative of the caller, and reliable (modulo SUPERUSER and<br>
SET AUTHORIZATION, but that&#39;s a different story and kinda normal)<br>
</blockquote><div><br></div><div>Why can you not use session_user then?</di=
v><div><br></div><div>David J.</div><div>=C2=A0</div>

--000000000000704ee8061bca58b3--