Re: [GENERAL] What user to defaults execute as?
От | Bruno Wolff III |
---|---|
Тема | Re: [GENERAL] What user to defaults execute as? |
Дата | |
Msg-id | 20021030204002.GA7210@wolff.to обсуждение исходный текст |
Ответ на | Re: [GENERAL] What user to defaults execute as? (Bruno Wolff III <bruno@wolff.to>) |
Ответы |
setuid for defaults, constraints and triggers (Was: What user to [sic] defaults execute as?)
Re: [GENERAL] What user to defaults execute as? |
Список | pgsql-hackers |
On Wed, Oct 30, 2002 at 14:03:21 -0600, > > While I am not sure about triggers, it certainly is possible to get > a similar effect be having the referenced function run with the security > of the definer. I read some more on triggers and found that according to the documentation, they appear to run as the user doing the insert, update or delete and are specifically noted to be dangerous. And while using the execute as definer can allow a trigger writer to provide limited access to the invoker, it doesn't protect the invoker from the trigger writer. It seems unlikely that triggers should be doing things to objects that the trigger owner doesn't have rights to. And this might be another place where using the access of the owner would be better than using that of the invoker.
В списке pgsql-hackers по дате отправления: