Re: Changing from security definer to security invoker withoutdropping ?

Поиск
Список
Период
Сортировка
От Pavel Stehule
Тема Re: Changing from security definer to security invoker withoutdropping ?
Дата
Msg-id CAFj8pRCgH6HnqchEuS0LCtYQk+ZqtrB8nAXT8OvUXzf_8BmbKw@mail.gmail.com
обсуждение исходный текст
Ответ на Changing from security definer to security invoker without dropping ?  (Laura Smith <n5d9xq3ti233xiyif2vp@protonmail.ch>)
Ответы Re: Changing from security definer to security invoker without dropping ?  (Laura Smith <n5d9xq3ti233xiyif2vp@protonmail.ch>)
Список pgsql-general
Дерево обсуждения
Hi

čt 11. 6. 2020 v 9:29 odesílatel Laura Smith <n5d9xq3ti233xiyif2vp@protonmail.ch> napsal:
Hi,

Just curious if there is a way to switch a function from definer to invoker without dropping ?

create function foo(a int) returns int as $$ begin return $1; end $$ language plpgsql;

postgres=# alter function foo (int) security definer;
ALTER FUNCTION
postgres=# alter function foo (int) security invoker;
ALTER FUNCTION

regards

Pavel

 

We're working on improving the security posture by changing functions from definer to invoker, but I'm wondering what the best way to roll this out to production is given that dropping and re-creating functions could potentially cause upstream client hassles ?

Laura


В списке pgsql-general по дате отправления:

Предыдущее
От: Laura Smith
Дата:
Сообщение: Changing from security definer to security invoker without dropping ?
Следующее
От: Laura Smith
Дата:
Сообщение: Re: Changing from security definer to security invoker without dropping ?