Because a SECURITY DEFINER function is executed
with the privileges of the user that owns it, care is needed to
- ensure that the function cannot be misused. This is particularly
- important for non-sql_body functions because
- their function bodies are evaluated at run-time, not creation time.
- For security,
+ ensure that the function cannot be misused. For security,
should be set to exclude any schemas
writable by untrusted users. This prevents
malicious users from creating objects (e.g., tables, functions, and