Re: Function Permissions

From: Bruno Wolff III <bruno(at)wolff(dot)to>
To: Telecontrol Networking <pglist(at)telecontrol(dot)com(dot)br>
Cc: pgsql-hackers(at)postgresql(dot)org
Subject: Re: Function Permissions
Date: 2003-10-25 18:18:03
Message-ID: 20031025181803.GA15088@wolff.to
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Sat, Oct 25, 2003 at 15:11:06 -0200,
Telecontrol Networking <pglist(at)telecontrol(dot)com(dot)br> wrote:
> Hi,
>
> I really need that a FUNCTION runs allways with this creator/owner permissions, and not with the user permission.
>
> In other words, my FUNCTION must execute several procedures as POSTGRES superuser, and the tables its needs access/insert/delete/update has no permissions to normal user. Only calling my FUNCTION the normal user can do that, and never updating or deleting directly over the tables.
>
> Any idea ?

You can use security definer clause when creating the function.

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Peter Eisentraut 2003-10-25 20:24:14 Re: Call for port reports
Previous Message Telecontrol Networking 2003-10-25 17:11:06 Function Permissions