Re: [BUG] SECURITY DEFINER on call handler makes daemon crash

Robert Haas <robertmhaas@gmail.com>

From: Robert Haas <robertmhaas@gmail.com>

To: Tom Lane <tgl@sss.pgh.pa.us>

Cc: KaiGai Kohei <kaigai@ak.jp.nec.com>, PostgreSQL-Hackers <pgsql-hackers@postgresql.org>

Date: 2010-03-19T23:06:06Z

Lists: pgsql-hackers

On Fri, Mar 19, 2010 at 8:18 AM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
> KaiGai Kohei <kaigai@ak.jp.nec.com> writes:
>> When we assign "SECURITY DEFINER" attribute on plpgsql_call_handler(),
>> it makes server process crashed.
>
> So don't do that.  Whatever possessed you to think that's a sensible
> idea anyway?

It might not be sensible, but the whole server going down as a result
doesn't seem very sensible either.

...Robert