Re: [GENERAL] Why security-definer functions are executable by public by default?

2011-06-14 Thread Bruce Momjian
Tom Lane wrote: hubert depesz lubaczewski dep...@depesz.com writes: was pointed to the fact that security definer functions have the same default privileges as normal functions in the same language - i.e. if the language is trusted - public has the right to execute them. maybe i'm

Re: [GENERAL] Why security-definer functions are executable by public by default?

2011-04-06 Thread pasman pasmański
was pointed to the fact that security definer functions have the same default privileges as normal functions in the same language - i.e. if the language is trusted - public has the right to execute them. maybe i'm missing something important, but given the fact that security definer

Re: [GENERAL] Why security-definer functions are executable by public by default?

2011-04-06 Thread Simon Riggs
On Tue, Apr 5, 2011 at 3:45 PM, Tom Lane t...@sss.pgh.pa.us wrote: hubert depesz lubaczewski dep...@depesz.com writes: was pointed to the fact that security definer functions have the same default privileges as normal functions in the same language - i.e. if the language is trusted - public

Re: [GENERAL] Why security-definer functions are executable by public by default?

2011-04-06 Thread hubert depesz lubaczewski
On Wed, Apr 06, 2011 at 09:06:50AM +0200, pasman pasmański wrote: was pointed to the fact that security definer functions have the same default privileges as normal functions in the same language - i.e. if the language is trusted - public has the right to execute them. maybe i'm missing

Re: [GENERAL] Why security-definer functions are executable by public by default?

2011-04-06 Thread Adrian Klaver
On 04/06/2011 07:41 AM, hubert depesz lubaczewski wrote: On Wed, Apr 06, 2011 at 09:06:50AM +0200, pasman pasmański wrote: was pointed to the fact that security definer functions have the same default privileges as normal functions in the same language - i.e. if the language is trusted - public

[GENERAL] Why security-definer functions are executable by public by default?

2011-04-05 Thread hubert depesz lubaczewski
hi was pointed to the fact that security definer functions have the same default privileges as normal functions in the same language - i.e. if the language is trusted - public has the right to execute them. maybe i'm missing something important, but given the fact that security definer functions

Re: [GENERAL] Why security-definer functions are executable by public by default?

2011-04-05 Thread Sim Zacks
On 04/05/2011 09:41 AM, hubert depesz lubaczewski wrote: hi was pointed to the fact that security definer functions have the same default privileges as normal functions in the same language - i.e. if the language is trusted - public has the right to execute them. maybe i'm missing something

Re: [GENERAL] Why security-definer functions are executable by public by default?

2011-04-05 Thread Tom Lane
hubert depesz lubaczewski dep...@depesz.com writes: was pointed to the fact that security definer functions have the same default privileges as normal functions in the same language - i.e. if the language is trusted - public has the right to execute them. maybe i'm missing something