Clarify the meaning of "trusted language" in the documentation.

diff --git a/doc/src/sgml/ref/create_language.sgml b/doc/src/sgml/ref/create_language.sgml
index 679f8d50b150f5e5fe090c1b4cce5c868718b5cd..54245641e1ec12163c2de2bcb2f1ec46197d42b7 100644 (file)
--- a/doc/src/sgml/ref/create_language.sgml
+++ b/doc/src/sgml/ref/create_language.sgml
@@ -1,5 +1,5 @@
 
 
@@ -104,11 +104,10 @@ CREATE [ OR REPLACE ] [ TRUSTED ] [ PROCEDURAL ] LANGUAGE 
 
      
       
-       TRUSTED specifies that
-       the language is safe, that is, it does not offer an
-       unprivileged user any functionality to bypass access
-       restrictions. If this key word is omitted when registering the
-       language, only users with the
+       TRUSTED specifies that the language does
+       not grant access to data that the user would not otherwise
+       have.  If this key word is omitted
+       when registering the language, only users with the
        PostgreSQL superuser privilege can
        use this language to create new functions.
       

diff --git a/doc/src/sgml/xplang.sgml b/doc/src/sgml/xplang.sgml
index 87de1971bc48076319748648f91cbe06966ba801..78daa40ff16689bc8185f2bb800c64aefb438b19 100644 (file)
--- a/doc/src/sgml/xplang.sgml
+++ b/doc/src/sgml/xplang.sgml
@@ -1,4 +1,4 @@
-
+
 
  
   Procedural Languages
@@ -151,8 +151,10 @@ CREATE TRUSTED PROCEDURAL LANGUAGE 
     VALIDATOR validator_function_name ;
 
       The optional key word TRUSTED specifies that
-      ordinary database users that have no superuser privileges should
-      be allowed to use this language to create functions and trigger
+      the language does not grant access to data that the user would
+      not otherwise have.  Trusted languages are designed for ordinary
+      database users (those without superuser privilege) and allows them
+      to safely create of functions and trigger
       procedures. Since PL functions are executed inside the database
       server, the TRUSTED flag should only be given
       for languages that do not allow access to database server