"Dave Fennell" <d...@microtux.co.uk> writes:
> I would expect that if a function defined as "security definer" calls a
> function defined as "security invoker" the "invoker" role used would be the
> "definer" of the first function?
So would I.
> However it appears that the *actual*
> invoker (current user) is used.
You did not provide any evidence of that. Please show a *complete*
self-contained test case.
regards, tom lane
--
Sent via pgsql-bugs mailing list (pgsql-bugs@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-bugs
