Re: Access to table only through functions

Alvin D?az <[email protected]>
Newsgroups gmane.comp.db.postgresql.sql
Message-ID <MWHPR17MB1392311B6691ED0A967BDFA8E79B0@MWHPR17MB1392.namprd17.prod.outlook.com>
Thanks for your answer this fix my problem.

Sent from my iPhone

> On May 6, 2018, at 9:14 PM, Gerardo Herzig <[email protected]> wrote:
> 
> 
> 
> ----- Mensaje original -----
>> De: "Alvin D?az" <[email protected]>
>> Para: [email protected]
>> Enviados: Domingo, 6 de Mayo 2018 19:51:09
>> Asunto: Access to table only through functions
> 
>> I am working in a software but I am using and approach in which business logic
>> is in the database this way programmers only have to worry about what functions
>> they have to call to perform some action or wich view query to get certain data
>> but for this work perfectly I need to prevent developers to realize direct CRUD
>> operations against the tables so is there a way that I could just allow a db
>> user have permission to execute functions but not to perform actions on tables
>> 
>> Example:
>> 
>> 1- table_user(id int, name text)
>> 2- function_save_user(id int, name int).......
>> 
>> You can insert using the function but not writing direct insert statement.
>> 
> What you want is the "security definer" option when create functions. See
> https://www.postgresql.org/docs/current/static/sql-createfunction.html
> 
> HTH
> Gerardo
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.