Re: Fixing insecure security definer functions

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: Fixing insecure security definer functions
Дата
Msg-id 1264.1171415429@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: Fixing insecure security definer functions  (Stephen Frost <sfrost@snowman.net>)
Ответы Re: Fixing insecure security definer functions  (Stephen Frost <sfrost@snowman.net>)
Список pgsql-hackers
Stephen Frost <sfrost@snowman.net> writes:
> It'll break most of the functions that we have in our production
> systems...  They're not security definer functions but it's routine for
> us to switch between different schemas to run a function on.

> What about pushing all the in-function references down to the
> specific objects referenced at plan creation time (err, I thought this
> was done?)?

Wouldn't that break exactly the cases you're worried about?  It would be
an enormous amount of work, too.
        regards, tom lane


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: Writing triggers in C++
Следующее
От: Stephen Frost
Дата:
Сообщение: Re: Fixing insecure security definer functions