pg.ddx.io  pgsql-sql@postgresql.org mailing list archive  

help / color / mirror / Atom feed

security definer function
3+ messages / 3 participants
[nested] [flat]

* security definer function
@ 2003-10-08 07:20  Tomek <myrcioch@poczta.onet.BLABLA.pl>
  0 siblings, 1 reply; 3+ messages in thread

From: Tomek @ 2003-10-08 07:20 UTC (permalink / raw)
  To: pgsql-sql

Hi

I have two functions:

A) function defined with "SECURITY DEFINER"
B) function defined with "SECURITY INVOKER"

Function A calls function B.

How is the function b called - with rights of definer of function A, or 
rather with rights of caller of function A ?

Regards,
Tomasz Myrta




^ permalink  raw  reply  [nested|flat] 3+ messages in thread

* security definer function
@ 2003-10-08 10:36  Tomasz Myrta <jasiek@klaster.net>
  0 siblings, 0 replies; 3+ messages in thread

From: Tomasz Myrta @ 2003-10-08 10:36 UTC (permalink / raw)
  To: pgsql-sql

Hi

I have two functions:

A) function defined with "SECURITY DEFINER"
B) function defined with "SECURITY INVOKER"

Function A calls function B.

How is the function b called - with rights of definer of function A, or 
rather with rights of caller of function A ?

Regards,
Tomasz Myrta




^ permalink  raw  reply  [nested|flat] 3+ messages in thread

* Re: security definer function
@ 2003-10-14 18:13  Peter Eisentraut <peter_e@gmx.net>
  parent: Tomek <myrcioch@poczta.onet.BLABLA.pl>
  0 siblings, 0 replies; 3+ messages in thread

From: Peter Eisentraut @ 2003-10-14 18:13 UTC (permalink / raw)
  To: Tomek <myrcioch@poczta.onet.BLABLA.pl>; +Cc: pgsql-sql

Tomek writes:

> A) function defined with "SECURITY DEFINER"
> B) function defined with "SECURITY INVOKER"
>
> Function A calls function B.
>
> How is the function b called - with rights of definer of function A,

Yes.

An easy way to arrive at this answer would have been to print current_user
in function B.

-- 
Peter Eisentraut   peter_e@gmx.net




^ permalink  raw  reply  [nested|flat] 3+ messages in thread

end of thread, other threads:[~2003-10-14 18:13 UTC | newest]

Thread overview: 3+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2003-10-08 07:20 security definer function Tomek <myrcioch@poczta.onet.BLABLA.pl>
2003-10-14 18:13 ` Peter Eisentraut <peter_e@gmx.net>
2003-10-08 10:36 security definer function Tomasz Myrta <jasiek@klaster.net>

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox