"Dave Fennell" <dave@microtux.co.uk> writes:
> I would expect that if a function defined as "security definer" calls a
> function defined as "security invoker" the "invoker" role used would be the
> "definer" of the first function?
So would I.
> However it appears that the *actual*
> invoker (current user) is used.
You did not provide any evidence of that. Please show a *complete*
self-contained test case.
regards, tom lane
