Re: Controlling changes in plpgsql variable resolution - Mailing list pgsql-hackers

From Josh Berkus
Subject Re: Controlling changes in plpgsql variable resolution
Date
Msg-id 4ADF699A.3010300@agliodbs.com
Whole thread Raw
In response to Re: Controlling changes in plpgsql variable resolution  (Josh Berkus <josh@agliodbs.com>)
List pgsql-hackers
On 10/21/09 1:02 PM, Josh Berkus wrote:
>> That's what the #option alternative is for.  Yes, it's a bit ugly, but
>> it's perfectly functional, and secure too.
> 
> I still don't see why it's needed.  If the function owner simply sets
> the option in the function definitions (as a userset), it doesn't matter
> what the calling user sets, does it?
> 
> All that's needed is a scripting example to set this in all function
> definitions as a regular setting.

Actually, to follow this up: there would be *huge* utility in ALTER
FUNCTION name SET setting=value statement.  This would help people do
all the "lock down" things we want to do with function definitions.

There'd also be utility in a default set of guc settings for new
functions, but maybe we should put that off ...

--Josh



pgsql-hackers by date:

Previous
From: Heikki Linnakangas
Date:
Subject: Re: Hot standby, prepared xacts, locks
Next
From: Samuel ROZE
Date:
Subject: Re: URL Managment - C Function help