| From: | Berend Tober <btober(at)broadstripe(dot)net> |
|---|---|
| To: | Guillaume Lelarge <guillaume(at)lelarge(dot)info>, Berend Tober <btober(at)broadstripe(dot)net> |
| Cc: | Saimon Lim <aimon(dot)slim(at)gmail(dot)com>, PostgreSQL General <pgsql-general(at)postgresql(dot)org> |
| Subject: | Re: How to hide stored procedure's bodies from specific user |
| Date: | 2015-02-14 14:32:08 |
| Message-ID: | 54DF5C68.8070506@computer.org |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-general |
Guillaume Lelarge wrote:
> 2015-02-14 14:07 GMT+01:00 Berend Tober <btober(at)broadstripe(dot)net
> <mailto:btober(at)broadstripe(dot)net>>:
>
> Saimon Lim wrote:
>
> Thanks for your help
>
> I want to restrict some postgres users as much as possible and allow
> them to execute a few my own stored procedures only.
>
>
> Create the function that you want restrict access to in a separate
> 'private' schema to which usage is not granted.
>
> Create the functions you wish to allow access to in a schema to
> which the role is granted access to. ...
>
> Unless I misunderstood something, this doesn't protect at all the
> function source code. You can still get it by reading pg_proc.
>
Agreed, but he already knows about that and how to mitigate.
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Tom Lane | 2015-02-14 15:41:42 | Re: increasing varchar column size is taking too much time |
| Previous Message | Guillaume Lelarge | 2015-02-14 14:30:07 | Re: How to hide stored procedure's bodies from specific user |