From: | Pavel Stehule <pavel(dot)stehule(at)gmail(dot)com> |
---|---|
To: | Laura Smith <n5d9xq3ti233xiyif2vp(at)protonmail(dot)ch> |
Cc: | postgre <pgsql-general(at)lists(dot)postgresql(dot)org> |
Subject: | Re: Changing from security definer to security invoker without dropping ? |
Date: | 2020-06-11 07:39:18 |
Message-ID: | CAFj8pRCgH6HnqchEuS0LCtYQk+ZqtrB8nAXT8OvUXzf_8BmbKw@mail.gmail.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general |
Hi
čt 11. 6. 2020 v 9:29 odesílatel Laura Smith <
n5d9xq3ti233xiyif2vp(at)protonmail(dot)ch> napsal:
> Hi,
>
> Just curious if there is a way to switch a function from definer to
> invoker without dropping ?
>
create function foo(a int) returns int as $$ begin return $1; end $$
language plpgsql;
postgres=# alter function foo (int) security definer;
ALTER FUNCTION
postgres=# alter function foo (int) security invoker;
ALTER FUNCTION
regards
Pavel
>
> We're working on improving the security posture by changing functions from
> definer to invoker, but I'm wondering what the best way to roll this out to
> production is given that dropping and re-creating functions could
> potentially cause upstream client hassles ?
>
> Laura
>
>
>
From | Date | Subject | |
---|---|---|---|
Next Message | Laura Smith | 2020-06-11 07:51:23 | Re: Changing from security definer to security invoker without dropping ? |
Previous Message | Laura Smith | 2020-06-11 07:29:17 | Changing from security definer to security invoker without dropping ? |