Message-ID: <3F0AF29F.4050501@joeconway.com>
Date: Tue, 08 Jul 2003 09:34:39 -0700
From: Joe Conway <mail@joeconway.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US;
	rv:1.3) Gecko/20030312
MIME-Version: 1.0
To: Luis Sousa <llsousa@ualg.pt>
Cc: pgsql-sql <pgsql-sql@postgresql.org>
Subject: Re: Setuid functions
References: <3F0AF186.2010107@ualg.pt>
In-Reply-To: <3F0AF186.2010107@ualg.pt>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

Luis Sousa wrote:
> How can I set a function as setuid ?
> I take a look at the documetation, on Reference Manual and the only 
> reference I saw to it was on SET SESSION AUTHORIZATION.

See:
http://www.postgresql.org/docs/view.php?version=7.3&idoc=0&file=sql-createfunction.html

CREATE [ OR REPLACE ] FUNCTION name ( [ argtype [, ...] ] )
      RETURNS rettype
    { LANGUAGE langname
      | IMMUTABLE | STABLE | VOLATILE
      | CALLED ON NULL INPUT | RETURNS NULL ON NULL INPUT | STRICT
      | [EXTERNAL] SECURITY INVOKER | [EXTERNAL] SECURITY DEFINER
      | AS 'definition'
      | AS 'obj_file', 'link_symbol'
    } ...
      [ WITH ( attribute [, ...] ) ]


[EXTERNAL] SECURITY INVOKER
[EXTERNAL] SECURITY DEFINER

     SECURITY INVOKER indicates that the function is to be executed with 
the privileges of the user that calls it. That is the default. SECURITY 
DEFINER specifies that the function is to be executed with the 
privileges of the user that created it.

     The key word EXTERNAL is present for SQL compatibility but is 
optional since, unlike in SQL, this feature does not only apply to 
external functions.

HTH,

Joe