Am Dienstag, 11. September 2007 15:53 schrieb Tom Lane:
> Zdenek Kotala <[EMAIL PROTECTED]> writes:
> > I have a question about what does happen if search path is not defined
> > for SECURITY DEFINER function. My expectation is that SECURITY DEFINER
> > function should defined empty search patch in this case.
>
> Your expectation is incorrect.  We are not in the business of breaking
> every application in sight, which is what that would do.

Well, a SECURITY DEFINER function either sets its own search path, in which 
case a default search path would have no effect, or it doesn't set its own 
search path, in which case it's already broken (albeit in a different way).  
So setting a default search path can only be a net gain.

-- 
Peter Eisentraut
http://developer.postgresql.org/~petere/

---------------------------(end of broadcast)---------------------------
TIP 7: You can help support the PostgreSQL project by donating at

                http://www.postgresql.org/about/donate

Reply via email to