Re: Revoking Function Execute Privilege

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: "David Johnston" <polobo(at)yahoo(dot)com>
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: Revoking Function Execute Privilege
Date: 2011-02-14 17:17:22
Message-ID: 26562.1297703842@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

"David Johnston" <polobo(at)yahoo(dot)com> writes:
> REVOKE ALL ON FUNCTION testfunc() FROM impotent;

This does not get rid of the default public execute permissions on the
function. To limit execute rights, you first have to

REVOKE ALL ON FUNCTION testfunc() FROM PUBLIC;

and then grant rights back to the appropriate subset of users.

regards, tom lane

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Ahmed Ossama 2011-02-14 17:40:15 Using Bitmap scan instead of Seq scan
Previous Message David Johnston 2011-02-14 17:03:00 Revoking Function Execute Privilege