Re: [GENERAL] DML Restriction unless through a function

2004-06-30 Thread Bruno Wolff III
On Wed, Jun 30, 2004 at 15:02:33 +0100, Adam Witney <[EMAIL PROTECTED]> wrote: > > Out of interest, what are the issues? You should be able to find a more accurate description in the archives, but my memory is that when you run a security definer function in a view (this shouldn't apply if it i

Re: [GENERAL] DML Restriction unless through a function

2004-06-30 Thread Adam Witney
On 30/6/04 2:52 pm, "Bruno Wolff III" <[EMAIL PROTECTED]> wrote: > On Wed, Jun 30, 2004 at 13:21:00 +0100, > [EMAIL PROTECTED] wrote: >> >> If I revoke insert,update,delete privileges on a table, would >> the user still be able to affect data manipulation through a >> function? Is that another w

Re: [GENERAL] DML Restriction unless through a function

2004-06-30 Thread Bruno Wolff III
On Wed, Jun 30, 2004 at 13:21:00 +0100, [EMAIL PROTECTED] wrote: > > If I revoke insert,update,delete privileges on a table, would > the user still be able to affect data manipulation through a > function? Is that another way of getting around this? If you use a security definer function whe

Re: [GENERAL] DML Restriction unless through a function

2004-06-30 Thread Shridhar Daithankar
[EMAIL PROTECTED] wrote: Hi all; Is it possible to write a trigger or the ilk that would disallow direct inserts, updates, or deletes to a table unless it was being executed through a function? How can I identify that the DML being issued is being done via a function? http://www.postgresql.org/