> On Feb 22, 2023, at 10:49 AM, Jeff Davis <pg...@j-davis.com> wrote: > > On Wed, 2023-02-22 at 09:27 -0800, Mark Dilger wrote: >> Another option is to execute under the intersection of their >> privileges, where both the definer and the invoker need the >> privileges in order for the action to succeed. That would be more >> permissive than the proposed SECURITY NONE, while still preventing >> either party from hijacking privileges of the other. > > Interesting idea, I haven't heard of something like that being done > before. Is there some precedent for that or a use case where it's > helpful? No current use case comes to mind, but I proposed it for event triggers one or two development cycles ago, to allow for non-superuser event trigger owners. The problems associated with allowing non-superusers to create and own event triggers were pretty similar to the problems being discussed in this thread. — Mark Dilger EnterpriseDB: http://www.enterprisedb.com The Enterprise PostgreSQL Company
- Re: Non-superuser subscription owners Robert Haas
- Re: Non-superuser subscription owners Andres Freund
- Re: Non-superuser subscription owners Robert Haas
- Re: Non-superuser subscription owners Andres Freund
- Re: Non-superuser subscription owners Robert Haas
- Re: Non-superuser subscription owners Andres Freund
- Re: Non-superuser subscription owners Robert Haas
- Re: Non-superuser subscription owners Jeff Davis
- Re: Non-superuser subscription owners Mark Dilger
- Re: Non-superuser subscription owners Jeff Davis
- Re: Non-superuser subscription owners Mark Dilger
- Re: Non-superuser subscription owners Joe Conway
- Re: Non-superuser subscription owners Robert Haas
- Re: Non-superuser subscription owners Jeff Davis
- Re: Non-superuser subscription owners Stephen Frost
- Re: Non-superuser subscription owners Jeff Davis
- Re: Non-superuser subscription owners Stephen Frost
- Re: Non-superuser subscription owners Robert Haas
- Re: Non-superuser subscription owners Jeff Davis
- Re: Non-superuser subscription owners Stephen Frost
- Re: Non-superuser subscription owners Robert Haas