Re: Execute function without execute privilege

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: "Walker, Jed S" <Jed_Walker(at)cable(dot)comcast(dot)com>
Cc: "'pgsql-novice(at)postgresql(dot)org'" <pgsql-novice(at)postgresql(dot)org>
Subject: Re: Execute function without execute privilege
Date: 2005-05-05 20:24:21
Message-ID: 24687.1115324661@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-novice

"Walker, Jed S" <Jed_Walker(at)cable(dot)comcast(dot)com> writes:
> I discovered today that when I create a function in a schema that another
> user has "grant usage" on, they are able to execute the function even though
> I've not granted them "execute" on the function.

> Is this normal behavior (from the manual I don't believe it is)?

Yes, it is, because the default for functions is to grant PUBLIC EXECUTE
access. Revoke that if you don't want it.

regards, tom lane

In response to

Browse pgsql-novice by date

  From Date Subject
Next Message Cima 2005-05-06 01:20:34 downloading files
Previous Message Walker, Jed S 2005-05-05 19:53:20 Execute function without execute privilege