search

supabase / pg_net

A PostgreSQL extension that enables asynchronous (non-blocking) HTTP/HTTPS requests with SQL
https://supabase.github.io/pg_net
Apache License 2.0
213 stars 16 forks source link

fix: permission denied for net tables #120

Closed steve-chavez closed 7 months ago

steve-chavez commented 8 months ago

Closes #72

Also bumps version to 0.8.0. Includes the change from https://github.com/supabase/pg_net/pull/123

soedirgo commented 7 months ago

Looking at the linked issue, if some tool is resetting the privileges on these functions, I don't think moving them to the tables would help.

pg_cron is an example of the contrary, because it only grants select (and even then, only for cron.job and not for cron.job_run_details) and inserts are done through a kinda-sorta secdef function.

soedirgo commented 7 months ago

If we're sure about granting to public (which I'm still not sure what the implications are) it seems a more incremental change would be to keep the functions as secdef but grant execute to public.

steve-chavez commented 7 months ago

Right, maybe we should leave the privileges as is. #72 has been rare until now.