Re: Security Definer functions no longer works in PG14+

From: Pavel Stehule <pavel(dot)stehule(at)gmail(dot)com>
To: Andrew Borodin <amborodin86(at)gmail(dot)com>
Cc: "David G(dot) Johnston" <david(dot)g(dot)johnston(at)gmail(dot)com>, Jan Katins <jasc(at)gmx(dot)net>, Jobin Augustine <jobinau(at)gmail(dot)com>, "pgsql-bugs(at)lists(dot)postgresql(dot)org" <pgsql-bugs(at)lists(dot)postgresql(dot)org>
Subject: Re: Security Definer functions no longer works in PG14+
Date: 2022-05-06 06:57:25
Message-ID: CAFj8pRBfNdR2gw4vj1JrRhcDatfPn+GnDFy-UKTfz6d3Xnyu5w@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

pá 6. 5. 2022 v 8:51 odesílatel Andrew Borodin <amborodin86(at)gmail(dot)com>
napsal:

> On Fri, May 6, 2022 at 11:32 AM David G. Johnston
> <david(dot)g(dot)johnston(at)gmail(dot)com> wrote:
> >
> > The %I handles the name.
> >
>
> You are right. I didn't know that %I makes special checking for quotes.
>

it provides sanitization - just it is shortcut for qoute_ident

Regards

Pavel

>
> Best regards, Andrey Borodin.
>
>
>

In response to

Browse pgsql-bugs by date

  From Date Subject
Next Message Amit Kapila 2022-05-07 10:22:05 Re: Security Definer functions no longer works in PG14+
Previous Message Andrew Borodin 2022-05-06 06:51:40 Re: Security Definer functions no longer works in PG14+