Greg Stark <greg(dot)stark(at)enterprisedb(dot)com> writes:
> Come to think of it though... Do we require creators of new aggregates
> own the state transition function? If not we have a problem...
No, but they are required to have permission to call it. So you could
restrict the transition function to superusers if you were worried.
regards, tom lane