Re: Authorized privileges when calling a procedure - Mailing list pgsql-novice

From Tom Lane
Subject Re: Authorized privileges when calling a procedure
Date
Msg-id 837.1114182213@sss.pgh.pa.us
Whole thread Raw
In response to Authorized privileges when calling a procedure  ("Walker, Jed S" <Jed_Walker@cable.comcast.com>)
List pgsql-novice
"Walker, Jed S" <Jed_Walker@cable.comcast.com> writes:
> I have another question. It appears that when you create a procedure and
> grant access on it to another user, the user must have privileges to all
> objects that the procedure references. Can someone confirm this, and is
> there a way to change the privilege authorization to the user that defined
> the procedure?

Mark the function as SECURITY DEFINER --- this is like setuid programs
in Unix.

(No, it's not a very intuitive label for the behavior, but it's what
the SQL spec says to use.)

            regards, tom lane

pgsql-novice by date:

Previous
From: tövis
Date:
Subject: Re: Granting permission on a sequence to a group
Next
From: "Van Ingen, Lane"
Date:
Subject: CHECK Constraints