On 30/6/04 2:52 pm, "Bruno Wolff III" <[EMAIL PROTECTED]> wrote:
> On Wed, Jun 30, 2004 at 13:21:00 +0100,
> [EMAIL PROTECTED] wrote:
>>
>> If I revoke insert,update,delete privileges on a table, would
>> the user still be able to affect data manipulation through a
>> function? Is that another way of getting around this?
>
> If you use a security definer function where the function creator
> has access to the table, but others don't then you can do that.
> There are some issues if you start using such functions in views,
> but for simple usage it will do what you want.
Out of interest, what are the issues?
Thanks
adam
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
---------------------------(end of broadcast)---------------------------
TIP 6: Have you searched our list archives?
http://archives.postgresql.org