Re: Hiding name and version

From: "Quiroga, Damian" <damian(dot)quiroga(at)intel(dot)com>
To: "Joshua D(dot) Drake" <jd(at)commandprompt(dot)com>, "pgsql-general(at)postgresql(dot)org" <pgsql-general(at)postgresql(dot)org>
Subject: Re: Hiding name and version
Date: 2015-09-17 18:11:09
Message-ID: 5F6634B7560CA34EA814093D8CDACAC736F8D5A1@fmsmsx107.amr.corp.intel.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Thanks for your answer.

I've tried something like "REVOKE EXECUTE ON FUNCTION version() FROM someuser;" and it doesn't work.
Apparently you can only revoke permissions that you have explicitly granted before.

Any other ideas?

Damian

-----Original Message-----
From: Joshua D. Drake [mailto:jd(at)commandprompt(dot)com]
Sent: Thursday, September 17, 2015 3:05 PM
To: Quiroga, Damian; pgsql-general(at)postgresql(dot)org
Subject: Re: [GENERAL] Hiding name and version

On 09/17/2015 10:32 AM, Quiroga, Damian wrote:
> Hi,
>
> Is it possible to prevent users from running the "version" function or
> all system information functions? If so, how?

You could probably revoke access to the function(s) (I haven't tried it because it seems very silly).

JD

--
Command Prompt, Inc. - http://www.commandprompt.com/ 503-667-4564 PostgreSQL Centered full stack support, consulting and development.
Announcing "I'm offended" is basically telling the world you can't control your own emotions, so everyone else should do it for you.

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Tom Lane 2015-09-17 18:11:37 Re: Hiding name and version
Previous Message Joshua D. Drake 2015-09-17 18:05:10 Re: Hiding name and version