pgsql: doc: warn of SECURITY DEFINER schemas for non-sql_body functions

From: Bruce Momjian <bruce(at)momjian(dot)us>
To: pgsql-committers(at)lists(dot)postgresql(dot)org
Subject: pgsql: doc: warn of SECURITY DEFINER schemas for non-sql_body functions
Date: 2022-09-01 01:11:04
Message-ID: E1oTYjY-000qfb-FI@gemulon.postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-committers

doc: warn of SECURITY DEFINER schemas for non-sql_body functions

Non-sql_body functions are evaluated at runtime.

Reported-by: Erki Eessaar

Discussion: https://postgr.es/m/AM9PR01MB8268BF5E74E119828251FD34FE409@AM9PR01MB8268.eurprd01.prod.exchangelabs.com

Backpatch-through: 10

Branch
------
master

Details
-------
https://git.postgresql.org/pg/commitdiff/1703726488064901e05aeb24b463e1dc3d07bde9

Modified Files
--------------
doc/src/sgml/ref/create_function.sgml | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)

Browse pgsql-committers by date

  From Date Subject
Next Message Bruce Momjian 2022-09-01 01:11:05 pgsql: doc: warn of SECURITY DEFINER schemas for non-sql_body functions
Previous Message Bruce Momjian 2022-09-01 00:27:54 pgsql: doc: mention that SET TIME ZONE often needs to be quoted