Re: Access to table only through functions
Gerardo Herzig <[email protected]>
| Newsgroups | gmane.comp.db.postgresql.sql |
|---|---|
| Message-ID | <[email protected]> |
----- Mensaje original ----- > De: "Alvin D?az" <[email protected]> > Para: [email protected] > Enviados: Domingo, 6 de Mayo 2018 19:51:09 > Asunto: Access to table only through functions > I am working in a software but I am using and approach in which business logic > is in the database this way programmers only have to worry about what functions > they have to call to perform some action or wich view query to get certain data > but for this work perfectly I need to prevent developers to realize direct CRUD > operations against the tables so is there a way that I could just allow a db > user have permission to execute functions but not to perform actions on tables > > Example: > > 1- table_user(id int, name text) > 2- function_save_user(id int, name int)....... > > You can insert using the function but not writing direct insert statement. > What you want is the "security definer" option when create functions. See https://www.postgresql.org/docs/current/static/sql-createfunction.html HTH Gerardo