Re: Re-enabling SET ROLE in security definer functions

Turner, Ian <ian.turner@deshaw.com>

From: "Turner, Ian" <Ian.Turner@deshaw.com>

To: Tom Lane <tgl@sss.pgh.pa.us>

Cc: Heikki Linnakangas <heikki.linnakangas@enterprisedb.com>, Gurjeet Singh <singh.gurjeet@gmail.com>, PGSQL Hackers <pgsql-hackers@postgresql.org>, George Williams <george.williams@enterprisedb.com>

Date: 2009-12-31T20:52:16Z

Lists: pgsql-hackers

> -----Original Message-----
> From: Tom Lane [mailto:tgl@sss.pgh.pa.us] 
> I agree that you have a problem to solve, but defining the problem as
> "please can we have SET ROLE back" is not going to lead you to a secure
> solution.

Fair enough. Thanks for the analysis.

--Ian