Re: Changing from security definer to security invoker without dropping ?

From: Pavel Stehule <pavel(dot)stehule(at)gmail(dot)com>
To: Laura Smith <n5d9xq3ti233xiyif2vp(at)protonmail(dot)ch>
Cc: postgre <pgsql-general(at)lists(dot)postgresql(dot)org>
Subject: Re: Changing from security definer to security invoker without dropping ?
Date: 2020-06-11 07:39:18
Message-ID: CAFj8pRCgH6HnqchEuS0LCtYQk+ZqtrB8nAXT8OvUXzf_8BmbKw@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Hi

čt 11. 6. 2020 v 9:29 odesílatel Laura Smith <
n5d9xq3ti233xiyif2vp(at)protonmail(dot)ch> napsal:

> Hi,
>
> Just curious if there is a way to switch a function from definer to
> invoker without dropping ?
>

create function foo(a int) returns int as $$ begin return $1; end $$
language plpgsql;

postgres=# alter function foo (int) security definer;
ALTER FUNCTION
postgres=# alter function foo (int) security invoker;
ALTER FUNCTION

regards

Pavel

>
> We're working on improving the security posture by changing functions from
> definer to invoker, but I'm wondering what the best way to roll this out to
> production is given that dropping and re-creating functions could
> potentially cause upstream client hassles ?
>
> Laura
>
>
>

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Laura Smith 2020-06-11 07:51:23 Re: Changing from security definer to security invoker without dropping ?
Previous Message Laura Smith 2020-06-11 07:29:17 Changing from security definer to security invoker without dropping ?