I added SECURITY DEFINER checks to agent-db-scan after feedback here
I shared agent-db-scan here recently, and u/ Classeve pointed out a blind spot I hadn't accounted for: SECURITY DEFINER functions. A Postgres login can have only SELECT on its tables and still be able to execute a SECURITY DEFINER function owned by a more privileged role. Since the function runs wi…
Read the full story at r/AI_Agents ↗
Timeline · 1 report
- 2026-10-06 16:23 · r/AI_Agents
I added SECURITY DEFINER checks to agent-db-scan after feedback here