Re: [PATCH] Re: Setuid functions

Mark Volpe writes:

> This patch will implement the "ENABLE PRIVILEGE" and "DISABLE PRIVILEGE"
> commands   in PL/pgSQL, which, respectively, change the effective uid to that
> of the function owner and back.

May I suggest better names?  When I do DISABLE PRIVILEGE, do I no longer
have any privilege?  Also, in SQL, the term "privilege" refers to
select/insert/update/etc. right on some table, so "enable privilege" would
be "grant".  The term for user identity is "authorization", so I would
call these commands
 SET AUTHORIZATION { INVOKER | DEFINER }

("invoker" and "definer" are part of the SQL CREATE FUNCTION syntax) and
the default would be invoker.

-- 
Peter Eisentraut   peter_e@gmx.net   http://funkturm.homeip.net/~peter