Dimitri Fontaine 1a45b2ec90 Review security model for executing Event Trigger code. (#12463) ...

When a function is owned by a superuser (bootstrap user or otherwise),
we consider it safe to run it. Only a superuser could have installed it,
typically from CREATE EXTENSION script: we trust the code to execute.

## Problem

This is intended to solve running pg_graphql Event Triggers
graphql_watch_ddl and graphql_watch_drop which are executing the secdef
function graphql.increment_schema_version().

## Summary of changes

Allow executing Event Trigger function owned by a superuser and with
SECURITY DEFINER properties. The Event Trigger code runs with superuser
privileges, and we consider that it's fine.

---------

Co-authored-by: Tristan Partin <tristan.partin@databricks.com>

2025-07-10 08:06:33 +00:00

..

test_event_trigger_extension

Review security model for executing Event Trigger code. (#12463)

2025-07-10 08:06:33 +00:00

test_remote_extensions

Add remote extension test with library component (#11301)

2025-04-24 22:33:46 +00:00

test_signed_char.out

Add -fsigned-char for cross platform signed chars (#10852)

2025-02-28 21:07:21 +00:00