Hi,

I have another question. It appears that when you create a procedure and
grant access on it to another user, the user must have privileges to all
objects that the procedure references. Can someone confirm this, and is
there a way to change the privilege authorization to the user that defined
the procedure?

> Thanks in advance,
>
> Jed S. Walker
>
>
>

"Walker, Jed S" <Jed_Walker@cable.comcast.com> writes:
> I have another question. It appears that when you create a procedure and
> grant access on it to another user, the user must have privileges to all
> objects that the procedure references. Can someone confirm this, and is
> there a way to change the privilege authorization to the user that defined
> the procedure?

Mark the function as SECURITY DEFINER --- this is like setuid programs
in Unix.

(No, it's not a very intuitive label for the behavior, but it's what
the SQL spec says to use.)

regards, tom lane

---------------------------(end of broadcast)---------------------------
TIP 1: subscribe and unsubscribe commands go to majordomo@postgresql.org