Re: [GENERAL] What user to defaults execute as?

Поиск
Список
Период
Сортировка
От Bruno Wolff III
Тема Re: [GENERAL] What user to defaults execute as?
Дата
Msg-id 20021030204002.GA7210@wolff.to
обсуждение исходный текст
Ответ на Re: [GENERAL] What user to defaults execute as?  (Bruno Wolff III <bruno@wolff.to>)
Ответы setuid for defaults, constraints and triggers (Was: What user to [sic] defaults execute as?)
Re: [GENERAL] What user to defaults execute as?
Список pgsql-hackers
On Wed, Oct 30, 2002 at 14:03:21 -0600,
> 
> While I am not sure about triggers, it certainly is possible to get
> a similar effect be having the referenced function run with the security
> of the definer.

I read some more on triggers and found that according to the documentation,
they appear to run as the user doing the insert, update or delete and
are specifically noted to be dangerous. And while using the execute as
definer can allow a trigger writer to provide limited access to the invoker,
it doesn't protect the invoker from the trigger writer. It seems unlikely
that triggers should be doing things to objects that the trigger owner
doesn't have rights to. And this might be another place where using the
access of the owner would be better than using that of the invoker.


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Rod Taylor
Дата:
Сообщение: 7.2.3 vacuum bug
Следующее
От: Neil Conway
Дата:
Сообщение: Re: 7.2.3 vacuum bug