Re: Removing the default grant of EXECUTE on functions/procedures to PUBLIC

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: "Tefft, Michael J" <Michael(dot)J(dot)Tefft(at)snapon(dot)com>
Cc: "pgsql-general(at)lists(dot)postgresql(dot)org" <pgsql-general(at)lists(dot)postgresql(dot)org>
Subject: Re: Removing the default grant of EXECUTE on functions/procedures to PUBLIC
Date: 2024-07-05 20:19:58
Message-ID: 338713.1720210798@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

"Tefft, Michael J" <Michael(dot)J(dot)Tefft(at)snapon(dot)com> writes:
> I apologize, that was sloppy.
> I was using the acldefault() function with pg_roles, like this:
> => select rolname, acldefault('f',oid) from pg_roles where rolname like 'mjt%' order by 1;

Ah, yeah, that always shows the *built in* default privileges for a
given object kind and owner. If there's a relevant entry in
pg_default_acl, it overrides the built-in default during object
creation.

regards, tom lane

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Achilleas Mantzios 2024-07-05 20:57:31 Re: Can a long running procedure detect when smart shutdown is pending?
Previous Message Tefft, Michael J 2024-07-05 18:42:54 RE: Removing the default grant of EXECUTE on functions/procedures to PUBLIC