> was pointed to the fact that security definer functions have the same > default privileges as normal functions in the same language - i.e. if > the language is trusted - public has the right to execute them. > > maybe i'm missing something important, but given the fact that security > definer functions are used to get access to things that you usually > don't have access to - shouldn't the privilege be revoked by default, > and grants left for dba to decide? >
you can create function in schema accesible to dba only. ------------ pasman -- Sent via pgsql-general mailing list (pgsql-general@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-general
