Re: Postgres 12 RLS - Mailing list pgsql-general

From Paul Förster
Subject Re: Postgres 12 RLS
Date
Msg-id B3750A95-C425-4C69-9D85-DAF5582FEA8B@gmail.com
Whole thread Raw
In response to Postgres 12 RLS  (Laura Smith <n5d9xq3ti233xiyif2vp@protonmail.ch>)
Responses Re: Postgres 12 RLS
List pgsql-general
Hi Laura,

> On 08. Jun, 2020, at 12:17, Laura Smith <n5d9xq3ti233xiyif2vp@protonmail.ch> $$ LANGUAGE plpgsql SECURITY DEFINER;

you might want to use security invoker instead of definer.

https://www.postgresql.org/docs/current/sql-createfunction.html#SQL-CREATEFUNCTION-SECURITY

https://www.cybertec-postgresql.com/en/abusing-security-definer-functions/

Cheers,
Paul




pgsql-general by date:

Previous
From: Laura Smith
Date:
Subject: Postgres 12 RLS
Next
From: Ravi Krishna
Date:
Subject: Re: Concurrenctly running CREATE TEMP TABLE IF NOT EXISTS [...] AS[...]