| From: | John Gunther <inbox(at)bucksvsbytes(dot)com> |
|---|---|
| To: | Pedro Salazar <pedro-b-salazar(at)ptinovacao(dot)pt> |
| Cc: | pgsql-admin <pgsql-admin(at)postgresql(dot)org> |
| Subject: | Re: create function (plpgsql): permission denied |
| Date: | 2003-04-07 16:45:40 |
| Message-ID: | 3E91AB34.1090702@bucksvsbytes.com |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-admin |
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1">
<title></title>
</head>
<body>
<br>
<br>
<blockquote type="cite"
cite="mid1049726289(dot)1132(dot)38(dot)camel(at)vitoria(dot)intra(dot)cet(dot)pt">
<pre wrap="">when I make grant usage on language 'plpgsql' to my user, I get this
error:
ERROR: language "plpgsql" is not trusted, if I must trust my language, I won't need the grant usage of
language to my user, will I?</pre>
</blockquote>
Yes, I miswrote that sentence. The language must be trusted for any
non-superuser to ever use it. Just because the language is trusted,
though, should not automatically allow users access to it without a
GRANT. The fact that they do not need GRANTing, though, is either a bug
or a documentation error.<br>
<blockquote type="cite"
cite="mid1049726289(dot)1132(dot)38(dot)camel(at)vitoria(dot)intra(dot)cet(dot)pt">
<pre wrap="">
So
BTW, if my user is already the owner of schema, is really need the grant
all on schema to my user?</pre>
</blockquote>
You're correct. I was allowing for <desireduser> to not be the
schema owner<br>
<blockquote type="cite"
cite="mid1049726289(dot)1132(dot)38(dot)camel(at)vitoria(dot)intra(dot)cet(dot)pt">
<pre wrap="">
thanks,
Pedro Salazar.
On Mon, 2003-04-07 at 13:53, John Gunther wrote:
</pre>
</blockquote>
<blockquote type="cite"
cite="mid1049726289(dot)1132(dot)38(dot)camel(at)vitoria(dot)intra(dot)cet(dot)pt">
<blockquote type="cite">
<pre wrap=""> From psql <databasename> -U<databaseowner>, issue:
GRANT USAGE ON LANGUAGE plpgsql to <desireduser>;
You may also need (to allow creation of the function)
GRANT ALL ON SCHEMA <schemaname> TO <desireduser>;
This will grant <desireduser> the usage of plpgsql even if it is untrusted.
</pre>
</blockquote>
<pre wrap=""><!---->
</pre>
</blockquote>
</body>
</html>
| Attachment | Content-Type | Size |
|---|---|---|
| unknown_filename | text/html | 1.8 KB |
| From | Date | Subject | |
|---|---|---|---|
| Next Message | CoL | 2003-04-07 18:27:38 | Re: Duplicate primary key and also the OID !!!! |
| Previous Message | Tom Lane | 2003-04-07 15:00:59 | Re: set persistent search_path |