Bruce Momjian writes:
> > I updated the patch to use the SET AUTHORIZATION { INVOKER | DEFINER }
> > terminology. Also, the function owner is now determined and saved at compile
> > time (no gotchas here, right?). It is located at
> >
> > http://volpe.home.mindspring.com/pgsql/set_auth.patch
>
> OK, patch applied. Can I have some docs with that burger? :-)
I think we concluded that this feature introduced a security hole.
--
Peter Eisentraut peter_e@gmx.net http://funkturm.homeip.net/~peter