is to be executed with the privileges of the user that calls it.
That is the default. SECURITY DEFINER
specifies that the function is to be executed with the
- privileges of the user that created it.
+ privileges of the user that owns it.
Because a SECURITY DEFINER function is executed
- with the privileges of the user that created it, care is needed to
+ with the privileges of the user that owns it, care is needed to
ensure that the function cannot be misused. For security,
should be set to exclude any schemas
writable by untrusted users. This prevents