Re: DML Restriction unless through a function - Mailing list pgsql-general

From Bruno Wolff III
Subject Re: DML Restriction unless through a function
Date
Msg-id 20040630135232.GA13891@wolff.to
Whole thread Raw
In response to DML Restriction unless through a function  (val@webtribe.net)
Responses Re: DML Restriction unless through a function  (Adam Witney <awitney@sghms.ac.uk>)
List pgsql-general
On Wed, Jun 30, 2004 at 13:21:00 +0100,
  val@webtribe.net wrote:
>
> If I revoke insert,update,delete privileges on a table, would
> the user still be able to affect data manipulation through a
> function?  Is that another way of getting around this?

If you use a security definer function where the function creator
has access to the table, but others don't then you can do that.
There are some issues if you start using such functions in views,
but for simple usage it will do what you want.

pgsql-general by date:

Previous
From: Shridhar Daithankar
Date:
Subject: Re: DML Restriction unless through a function
Next
From: Adam Witney
Date:
Subject: Re: DML Restriction unless through a function