Re: Linux User (& Developer) Expo 2004 - A brief

On Fri, Apr 23, 2004 at 08:49:46 +0100,
  Oliver Elphick <olly@lfix.co.uk> wrote:
>
> 4. I had one problem question which I couldn't solve, though I'm fairly
> sure it should be possible:  Can we create a function that can have
> privileges on an object that the person running the function does not
> have?  The user wants to channel all updates through a validating
> function; therefore users should not have insert, update or delete
> privileges on the table, but they should be able to do inserts, updates
> and deletes through this function instead.

You can create functions with 'SECURITY DEFINER' to access objects as
the function creator instead of the function caller.