Thread: Security definer function to alter a sequence

All;


Can I create a security definer function to alter a sequence value? Or 
is this considered DDL (and thus a security definer function os not 
allowed to run it)?


Thanks in advance

I thought that DDL calls in a security definer function were blocked. I may be confused

On Tue, Feb 11, 2025 at 2:53 PM Sbob <sbob@quadratum-braccas.com> wrote:

Can I create a security definer function to alter a sequence value? Or
is this considered DDL (and thus a security definer function os not
allowed to run it)?

What makes you think it being DDL makes any difference?

David J.

On Tue, 2025-02-11 at 15:57 -0700, Sbob wrote:
> I thought that DDL calls in a security definer function were blocked. I may be confused

I think you are.  I am not aware of anything that is forbidden in a SECURITY DEFINER
function.  On the contrary - people usually use them to perform activities that the
calling user is not allowed to do.

Don't forget to set a "search_path" on all SECURITY DEFINER functions.

Yours,
Laurenz Albe

-- 

*E-Mail Disclaimer*
Der Inhalt dieser E-Mail ist ausschliesslich fuer den 
bezeichneten Adressaten bestimmt. Wenn Sie nicht der vorgesehene Adressat 
dieser E-Mail oder dessen Vertreter sein sollten, so beachten Sie bitte, 
dass jede Form der Kenntnisnahme, Veroeffentlichung, Vervielfaeltigung oder 
Weitergabe des Inhalts dieser E-Mail unzulaessig ist. Wir bitten Sie, sich 
in diesem Fall mit dem Absender der E-Mail in Verbindung zu setzen.

*CONFIDENTIALITY NOTICE & DISCLAIMER
*This message and any attachment are 
confidential and may be privileged or otherwise protected from disclosure 
and solely for the use of the person(s) or entity to whom it is intended. 
If you have received this message in error and are not the intended 
recipient, please notify the sender immediately and delete this message and 
any attachment from your system. If you are not the intended recipient, be 
advised that any use of this message is prohibited and may be unlawful, and 
you must not copy this message or attachment or disclose the contents to 
any other person.