Re: Protect extension' internal tables - how?

2023-07-18 Thread Nikita Malakhov
Hi, Aleksander, thank you very much. Tables are already placed into special schema, but there are some dynamically created tables and the goal is to protect all these tables from direct insert, update and delete operations from users. I've read about the SECURITY DEFINER, it will do the trick.

Re: Protect extension' internal tables - how?

2023-07-17 Thread Aleksander Alekseev
Hi, > Could you please advise or give some hint on what is the correct (and > secure) way to implement this? > > Currently I use the owner of the extension as owner when creating > such a table inside the function, but maybe there are some pitfalls > in this kind of solution? If the goal is to

Protect extension' internal tables - how?

2023-07-15 Thread Nikita Malakhov
Hi hackers! While working on an extension I encountered a quite tricky question - the extension (with functions in C) creates tables during function calls, these tables must be protected from direct users' queries, at the same time they must remain accessible for all functions of this extension