Re: Authorized privileges when calling a procedure - Mailing list pgsql-novice

From Walker, Jed S
Subject Re: Authorized privileges when calling a procedure
Date
Msg-id 41669DC6FE3B80449A33A4DD46DB370A09E7EAFA@entcoexch15.broadband.att.com
Whole thread Raw
In response to Authorized privileges when calling a procedure  ("Walker, Jed S" <Jed_Walker@cable.comcast.com>)
List pgsql-novice
Great, that's exactly what I need.

Thanks!

-----Original Message-----
From: Tom Lane [mailto:tgl@sss.pgh.pa.us]
Sent: Friday, April 22, 2005 9:04 AM
To: Walker, Jed S
Cc: 'pgsql-novice@postgresql.org'
Subject: Re: [NOVICE] Authorized privileges when calling a procedure

"Walker, Jed S" <Jed_Walker@cable.comcast.com> writes:
> I have another question. It appears that when you create a procedure
> and grant access on it to another user, the user must have privileges
> to all objects that the procedure references. Can someone confirm
> this, and is there a way to change the privilege authorization to the
> user that defined the procedure?

Mark the function as SECURITY DEFINER --- this is like setuid programs in
Unix.

(No, it's not a very intuitive label for the behavior, but it's what the SQL
spec says to use.)

            regards, tom lane

pgsql-novice by date:

Previous
From: "Van Ingen, Lane"
Date:
Subject: CHECK Constraints
Next
From: Bruno Wolff III
Date:
Subject: Re: CHECK Constraints