agora inbox for pljava-dev@postgresql.org  

help / color / mirror / Atom feed

From: Kris Jurka <books@ejurka.com>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Jan Ischebeck <jan@ischebeck-consulting.de>
Cc: pgsql-hackers@postgresql.org
Cc: pljava-dev@pgfoundry.org
Subject: Re: Pl/Java broken since Postgresql 8.3-rc1
Date: Fri, 11 Jan 2008 00:01:24 -0500 (EST)
Message-ID: <Pine.BSO.4.64.0801102354050.23548@leary.csoft.net> (raw)
In-Reply-To: <7753.1200027031@sss.pgh.pa.us>
References: <d73417f56193529841de76dc1d9c2e7b@ischebeck-consulting.de>
	<Pine.BSO.4.64.0801102016550.18075@leary.csoft.net>
	<Pine.BSO.4.64.0801102313200.20240@leary.csoft.net>
	<7753.1200027031@sss.pgh.pa.us>



On Thu, 10 Jan 2008, Tom Lane wrote:

> Just out of curiosity, what was pljava doing calling SetUserId?
> If I'd known about that I'd have thought harder about removing the
> function; but it's not clear to me why a PL should be doing that.
>

pljava wants to run code as the session user when inside a security 
definer function.  The sqlj spec has an install_jar function which 
installs a library of java code and has an optional deployment descriptor 
which can create functions against the library and tables for it to use. 
The install_jar function is security definer to be able to register the 
jar file in various sqlj tables that the calling user may not be able to 
write to, but it wants to create the tables and function specified in the 
deployement descriptor with the ownership of the user calling install_jar, 
not the person who initially installed pljava.

Kris Jurka

view thread (10+ messages)  latest in thread

Message-ID: <Pine.BSO.4.64.0801102354050.23548@leary.csoft.net>
Permalink:  ../Pine.BSO.4.64.0801102354050.23548@leary.csoft.net/
Also on:    postgresql.org/message-id/Pine.BSO.4.64.0801102354050.23548@leary.csoft.net

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pljava-dev@postgresql.org
  Cc: books@ejurka.com, tgl@sss.pgh.pa.us, jan@ischebeck-consulting.de, pgsql-hackers@postgresql.org, pljava-dev@pgfoundry.org
  Subject: Re: Pl/Java broken since Postgresql 8.3-rc1
  In-Reply-To: <Pine.BSO.4.64.0801102354050.23548@leary.csoft.net>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox