Re: [HACKERS] security definer default for some PL languages (SQL/PSM)?

2007-01-08 Thread Albe Laurenz
Peter Eisentraut wrote: >> SQL/PSM default for SQL procedures are SECURITY DEFINER (like views), > > I can't find this in the standard. Where did you get this > information? I only have a draft version of SQL:2003, which says in the 'Foundation' book, chapter 11.50 (""), about the "" (which can

Re: [HACKERS] security definer default for some PL languages (SQL/PSM)?

2007-01-07 Thread Pavel Stehule
"Pavel Stehule" <[EMAIL PROTECTED]> writes: > SQL/PSM default for SQL procedures are SECURITY DEFINER (like views), but > PostgreSQL default is SECURITY CALLLER. Is acceptable to define security > flag in dependency to used language? I'd vote no, even if Peter is wrong and you're right about w

Re: [HACKERS] security definer default for some PL languages (SQL/PSM)?

2007-01-07 Thread Pavel Stehule
Pavel Stehule wrote: > SQL/PSM default for SQL procedures are SECURITY DEFINER (like views), I can't find this in the standard. Where did you get this information? -- Jim Melton, SQL's stored procedures, page 43, next: blom98sqlpsm: 3.3.1 Access rights to data By default, the stored routin

Re: [HACKERS] security definer default for some PL languages (SQL/PSM)?

2007-01-07 Thread Tom Lane
"Pavel Stehule" <[EMAIL PROTECTED]> writes: > SQL/PSM default for SQL procedures are SECURITY DEFINER (like views), but > PostgreSQL default is SECURITY CALLLER. Is acceptable to define security > flag in dependency to used language? I'd vote no, even if Peter is wrong and you're right about wha

Re: [HACKERS] security definer default for some PL languages (SQL/PSM)?

2007-01-07 Thread Peter Eisentraut
Pavel Stehule wrote: > SQL/PSM default for SQL procedures are SECURITY DEFINER (like views), I can't find this in the standard. Where did you get this information? -- Peter Eisentraut http://developer.postgresql.org/~petere/ ---(end of broadcast)