Re: [PATCH] Re: Setuid functions

Mark Volpe writes:

> This patch will implement the "ENABLE PRIVILEGE" and "DISABLE PRIVILEGE"
> commands in PL/pgSQL, which, respectively, change the effective uid to that
> of the function owner and back.

May I suggest better names? When I do DISABLE PRIVILEGE, do I no longer
have any privilege? Also, in SQL, the term "privilege" refers to
select/insert/update/etc. right on some table, so "enable privilege" would
be "grant". The term for user identity is "authorization", so I would
call these commands

SET AUTHORIZATION { INVOKER | DEFINER }

("invoker" and "definer" are part of the SQL CREATE FUNCTION syntax) and
the default would be invoker.

--
Peter Eisentraut peter_e(at)gmx(dot)net http://funkturm.homeip.net/~peter