Skip to content

Commit 17fa3e8

Browse files
committed
doc: clarify that function "ownership" that controls permission
It used to say the creation user. Reported-by: Nathan Wagner
1 parent 692ed05 commit 17fa3e8

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

doc/src/sgml/ref/create_function.sgml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -401,7 +401,7 @@ CREATE [ OR REPLACE ] FUNCTION
401401
is to be executed with the privileges of the user that calls it.
402402
That is the default. <literal>SECURITY DEFINER</literal>
403403
specifies that the function is to be executed with the
404-
privileges of the user that created it.
404+
privileges of the user that owns it.
405405
</para>
406406

407407
<para>
@@ -747,7 +747,7 @@ SELECT * FROM dup(42);
747747

748748
<para>
749749
Because a <literal>SECURITY DEFINER</literal> function is executed
750-
with the privileges of the user that created it, care is needed to
750+
with the privileges of the user that owns it, care is needed to
751751
ensure that the function cannot be misused. For security,
752752
<xref linkend="guc-search-path"> should be set to exclude any schemas
753753
writable by untrusted users. This prevents

0 commit comments

Comments
 (0)