Skip to content

Commit 17fa3e8

Browse files
committed
doc: clarify that function "ownership" that controls permission
It used to say the creation user. Reported-by: Nathan Wagner
1 parent 692ed05 commit 17fa3e8

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

doc/src/sgml/ref/create_function.sgml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -401,7 +401,7 @@ CREATE [ OR REPLACE ] FUNCTION
401401
is to be executed with the privileges of the user that calls it.
402402
That is the default. <literal>SECURITY DEFINER</literal>
403403
specifies that the function is to be executed with the
404-
privileges of the user that created it.
404+
privileges of the user that owns it.
405405
</para>
406406

407407
<para>
@@ -747,7 +747,7 @@ SELECT * FROM dup(42);
747747

748748
<para>
749749
Because a <literal>SECURITY DEFINER</literal> function is executed
750-
with the privileges of the user that created it, care is needed to
750+
with the privileges of the user that owns it, care is needed to
751751
ensure that the function cannot be misused. For security,
752752
<xref linkend="guc-search-path"> should be set to exclude any schemas
753753
writable by untrusted users. This prevents

0 commit comments

Comments
 (0)
pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy