dbaspot
Tags Register FAQ Calendar Search Today's Posts Mark Forums Read

Re: [GENERAL] Delete cascade trigger runs security definer - postgresql

This is a discussion on Re: [GENERAL] Delete cascade trigger runs security definer - postgresql ; Craig Ringer writes: > Is the search_path reset in some way that's not visible in > pg_catalog.pg_settings when the ON DELETE CASCADE is issued? No, I don't believe so. Perhaps your test case was simply fooled by plan caching within ...


Home > Database Forum > Other Databases > postgresql > Re: [GENERAL] Delete cascade trigger runs security definer

Reply

 

LinkBack Thread Tools Display Modes
  #1  
Old 11-14-2008, 02:19 PM
Database Bot
 
Join Date: Sep 2009
Posts: 1,236,254
Database Administrator is on a distinguished road
Default Re: [GENERAL] Delete cascade trigger runs security definer

Craig Ringer writes:
> Is the search_path reset in some way that's not visible in
> pg_catalog.pg_settings when the ON DELETE CASCADE is issued?


No, I don't believe so. Perhaps your test case was simply fooled by
plan caching within the trigger function?

In general the solution to this type of problem is to attach a
search_path setting to any function that might be invoked via untrusted
users.

regards, tom lane

--
Sent via pgsql-general mailing list (pgsql-general@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general

Reply With Quote
Reply

Thread Tools
Display Modes



All times are GMT -4. The time now is 11:09 AM.