Re: Changing from security definer to security invoker without dropping ?

[Pavel Stehule <pavel.stehule@xxxxxxxxx>]

Hi

čt 11. 6. 2020 v 9:29 odesílatel Laura Smith <n5d9xq3ti233xiyif2vp@xxxxxxxxxxxxx> napsal:

Hi,

Just curious if there is a way to switch a function from definer to invoker without dropping ?

create function foo(a int) returns int as $$ begin return $1; end $$ language plpgsql;

postgres=# alter function foo (int) security definer;
ALTER FUNCTION
postgres=# alter function foo (int) security invoker;
ALTER FUNCTION

regards

Pavel

 

We're working on improving the security posture by changing functions from definer to invoker, but I'm wondering what the best way to roll this out to production is given that dropping and re-creating functions could potentially cause upstream client hassles ?

Laura