Learning PostgreSQL 11 - Third Edition

Function authorization related parameters

The first parameters are related to security; when functions are called, they are executed within a security context that determines their privileges. The following options control the function privileges context:

• SECURITY DEFINER
• SECURITY INVOKER

The default value for this option is SECURITY INVOKER, which indicates that the function will be executed with the privileges of the user that calls it. The SECURITY DEFINER functions will be executed using the privileges of the user that created it. For the SECURITY INVOKER functions, the user must have the permissions to execute the CRUD operations that the function implements; otherwise, the function will raise an error. The SECURITY DEFINER functions ...