"hx.li" <fly...@126.com> writes:
>> This is not a bug. The view is owned by user1 and what the view can
>> access is determined by user1's permissions, independently of who is
>> calling it.
> So I think it should not have a permission error when run "select * from
> view1".
No, that would be a bad idea. Your proposal essentially means that it's
impossible for a superuser to give up rights when calling a setuid
function or view. That would be a serious security hazard.
regards, tom lane
--
Sent via pgsql-bugs mailing list (pgsql-bugs@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-bugs
