security issues

[Frank Eckes <frank.eckes@xxxxxxxxx>]

Hi everybody,

To access data in a PostgreSQL database I write queries which contains 
the business rules

how t access data. This is working fine and also the permission are 
working fine.

But I found out that a user can see the complete business rules in a 
query or a procedure which is

a big security issue.

Is there e possibility that I can hide the definition and th user can 
only see the data or can execute

the procedure/function.

And even worse, if i define a foreign server (e.g ORACLE) everybody can 
see the credentials in a user mapping

which should not be allowed. This might be a show stopper of using 
PostgreSQL in security environments.


Regards

Frank Eckes