Re: Changing from security definer to security invoker withoutdropping ?
| От | Pavel Stehule |
|---|---|
| Тема | Re: Changing from security definer to security invoker withoutdropping ? |
| Дата | |
| Msg-id | CAFj8pRCgH6HnqchEuS0LCtYQk+ZqtrB8nAXT8OvUXzf_8BmbKw@mail.gmail.com обсуждение исходный текст |
| Ответ на | Changing from security definer to security invoker without dropping ? (Laura Smith <n5d9xq3ti233xiyif2vp@protonmail.ch>) |
| Ответы |
Re: Changing from security definer to security invoker without dropping ?
|
| Список | pgsql-general |
Hi
čt 11. 6. 2020 v 9:29 odesílatel Laura Smith <n5d9xq3ti233xiyif2vp@protonmail.ch> napsal:
Hi,
Just curious if there is a way to switch a function from definer to invoker without dropping ?
create function foo(a int) returns int as $$ begin return $1; end $$ language plpgsql;
postgres=# alter function foo (int) security definer;
ALTER FUNCTION
postgres=# alter function foo (int) security invoker;
ALTER FUNCTION
ALTER FUNCTION
postgres=# alter function foo (int) security invoker;
ALTER FUNCTION
regards
Pavel
We're working on improving the security posture by changing functions from definer to invoker, but I'm wondering what the best way to roll this out to production is given that dropping and re-creating functions could potentially cause upstream client hassles ?
Laura
В списке pgsql-general по дате отправления: