Skip to content

Warn if execute not revoked from public for SECURITY DEFINER functions? #19

@JamesGuthrie

Description

@JamesGuthrie

Postgres' guidelines on SECURITY DEFINER functions mention that it's desirable to revoke EXECUTE from PUBLIC from them: https://www.postgresql.org/docs/current/sql-createfunction.html#SQL-CREATEFUNCTION-SECURITY

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions