Re: Re: [HACKERS] [PATCH] Re: Setuid functions

Bruce Momjian writes:

> > I updated the patch to use the SET AUTHORIZATION { INVOKER | DEFINER }
> > terminology. Also, the function owner is now determined and saved at compile
> > time (no gotchas here, right?). It is located at
> >
> > http://volpe.home.mindspring.com/pgsql/set_auth.patch
>
> OK, patch applied.  Can I have some docs with that burger?  :-)

I think we concluded that this feature introduced a security hole.

--
Peter Eisentraut   peter_e@gmx.net   http://funkturm.homeip.net/~peter