Function Permissions

Started by Telecontrol Networkingabout 22 years ago3 messages
#1Telecontrol Networking
pglist@telecontrol.com.br

Hi,

I really need that a FUNCTION runs allways with this creator/owner permissions, and not with the user permission.

In other words, my FUNCTION must execute several procedures as POSTGRES superuser, and the tables its needs access/insert/delete/update has no permissions to normal user. Only calling my FUNCTION the normal user can do that, and never updating or deleting directly over the tables.

Any idea ?

---------------------------------
Marco Túlio Oliveira
IT-Manager
www.telecontrol.com.br

#2Bruno Wolff III
bruno@wolff.to
In reply to: Telecontrol Networking (#1)
Re: Function Permissions

On Sat, Oct 25, 2003 at 15:11:06 -0200,
Telecontrol Networking <pglist@telecontrol.com.br> wrote:

Hi,

I really need that a FUNCTION runs allways with this creator/owner permissions, and not with the user permission.

In other words, my FUNCTION must execute several procedures as POSTGRES superuser, and the tables its needs access/insert/delete/update has no permissions to normal user. Only calling my FUNCTION the normal user can do that, and never updating or deleting directly over the tables.

Any idea ?

You can use security definer clause when creating the function.

#3Christopher Kings-Lynne
chriskl@familyhealth.com.au
In reply to: Telecontrol Networking (#1)
Re: Function Permissions

CREATE FUNCTION ... SECURITY DEFINER;

Read the 7.3 docs.

Chris

Telecontrol Networking wrote:

Show quoted text

Hi,

I really need that a FUNCTION runs allways with this creator/owner
permissions, and not with the user permission.

In other words, my FUNCTION must execute several procedures as POSTGRES
superuser, and the tables its needs access/insert/delete/update has no
permissions to normal user. Only calling my FUNCTION the normal user can
do that, and never updating or deleting directly over the tables.

Any idea ?

---------------------------------
Marco T�lio Oliveira
IT-Manager
www.telecontrol.com.br <http://www.telecontrol.com.br&gt;