Making "SECURITY DEFINER" procedures
| От | Sergey Holod |
|---|---|
| Тема | Making "SECURITY DEFINER" procedures |
| Дата | |
| Msg-id | 200304292352.26837.sergey@radiocom.net.ua обсуждение исходный текст |
| Список | pgsql-novice |
Hello!!!
Just trying to make subj
I made user "data", schema "data", several tables and small procedures on them
in that schema and then a greater function (as "SECURITY DEFINER") in
"public" schema which uses previous functions.
I graned "EXECUTE" access to that function to "PUBLIC".
When I try execute that function I get "ERROR: data: permission denied", but
when I add some notices between parts of function I see following:
tst=> select new_session('sergey','mypassword');
NOTICE: current user is data
NOTICE: after delete
NOTICE: after select
NOTICE: after insert
NOTICE: before return
ERROR: data: permission denied
so function executed with "data" privilegies, It deletes some data,
inserts another and so on, It even runs till "return", but then I get error...
It seems last error takes place during "auto commit" of transaction in which
function executes..
Just don't undestand what is happens..:(
--
With Best Regards,
Sergey Holod
В списке pgsql-novice по дате отправления: