| From: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
|---|---|
| To: | "Quiroga, Damian" <damian(dot)quiroga(at)intel(dot)com> |
| Cc: | "Joshua D(dot) Drake" <jd(at)commandprompt(dot)com>, "pgsql-general(at)postgresql(dot)org" <pgsql-general(at)postgresql(dot)org> |
| Subject: | Re: Hiding name and version |
| Date: | 2015-09-17 18:14:48 |
| Message-ID: | 16006.1442513688@sss.pgh.pa.us |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-general |
"Quiroga, Damian" <damian(dot)quiroga(at)intel(dot)com> writes:
> I've tried something like "REVOKE EXECUTE ON FUNCTION version() FROM someuser;" and it doesn't work.
> Apparently you can only revoke permissions that you have explicitly granted before.
The default behavior for built-in functions is as though the bootstrap
superuser has granted execute access to PUBLIC. You would need to
reverse that (and then grant it back to any non-superusers who
should have it).
regards, tom lane
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Florin Andrei | 2015-09-17 20:04:06 | Re: BDR: cannot drop database even after parting the node |
| Previous Message | Tom Lane | 2015-09-17 18:11:37 | Re: Hiding name and version |