David Legault wrote: > > > See the EXECUTE function in the pl/pgSQL language in the docs for dynamic > queries. > So it turns out that in a SECURITY DEFINER the current_user is the owner of the function. I had to use session_user and it works now :)
yes because you are running it in the context of the owner of the function
there is also another SECURITY setting that will be in the context of the caller where current_user() should return the callee.