| From: | Alvaro Herrera <alvherre(at)dcc(dot)uchile(dot)cl> |
|---|---|
| To: | Marvin McNett <mmcnett(at)cs(dot)ucsd(dot)edu> |
| Cc: | pgsql-general(at)postgresql(dot)org |
| Subject: | Re: insert through function only |
| Date: | 2004-05-03 23:01:02 |
| Message-ID: | 20040503230102.GB4638@dcc.uchile.cl |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-general |
On Mon, May 03, 2004 at 03:12:00PM -0700, Marvin McNett wrote:
> How do I go about ensuring that data is only added to a table through a
> function? I've tried granting execute persission on the function which
> inserts data, but can't get it to work unless the user also has insert
> permission on the table. I don't want the user to be able to
> arbitrarily insert data.
Was the function created with SECURITY DEFINER?
--
Alvaro Herrera (<alvherre[a]dcc.uchile.cl>)
"Porque francamente, si para saber manejarse a uno mismo hubiera que
rendir examen... ¿Quién es el machito que tendría carnet?" (Mafalda)
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Vikram Kulkarni | 2004-05-04 00:47:31 | Re: 7.4.2 Regression tests: test stats loops indefinately... |
| Previous Message | Marvin McNett | 2004-05-03 22:47:27 | Re: insert through function only |