Grant execute on functions; related objects permissions ?

From: Cédric Dufour (public) <cdufour-public(at)cogito-ergo-soft(dot)com>
To: <pgsql-sql(at)postgresql(dot)org>
Subject: Grant execute on functions; related objects permissions ?
Date: 2003-01-06 10:12:25
Message-ID: 000401c2b56c$1c1419d0$3c8addd5@cednetwork.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-sql

Hello,

PostgreSQL 7.3 happily introduced permissions on functions. Now, having
granted execution to a given function to a given user, I find myself with
"access denied" errors on the objects that the function actually uses (e.g.
a table on which it makes a select). So:

1. Am I missing something about how the GRANT ... ON FUNCTION works ?

2. Is there any way to automatically obtain privileges on the objects the
function uses, without having to GRANT specific permissions on those object
(the same way it works on MS-SQL) ?

3. Am I following the wrong direction (I understand question 2. might
actually introduce a permission "hole" on the objects that functions might
use; a user might obtain access to these objects through defining its own
function, am I right ?) ?

Thank you for you help,

Cédric Dufour - Cogito Ergo Soft
_____

Cogito Ergo Soft - Your think partner

Browse pgsql-sql by date

  From Date Subject
Next Message Tambet Matiisen 2003-01-06 10:45:25 Re: Grant execute on functions; related objects permissions ?
Previous Message Ludwig Lim 2003-01-05 12:18:37 Re: Deleting in order from a table