Skip site navigation (1) Skip section navigation (2)

Re: permissions PB [SOLVED]

From: "Jean-Yves F(dot) Barbier" <12ukwn(at)gmail(dot)com>
To: "Jean-Yves F(dot) Barbier" <12ukwn(at)gmail(dot)com>
Cc: pgsql-novice(at)postgresql(dot)org
Subject: Re: permissions PB [SOLVED]
Date: 2011-06-14 02:23:58
Message-ID: 20110614042358.0e737b99@anubis.defcon1 (view raw or flat)
Thread:
Lists: pgsql-novice
On Tue, 14 Jun 2011 02:39:29 +0200, "Jean-Yves F. Barbier" <12ukwn(at)gmail(dot)com>
wrote:

I didn't remember that 'public' needed to be revoked before permission could
be effective - sorry for the noise.

> The DB owner created a function as:
> CREATE FUNCTION mysch.testaddint(int, int) 
> RETURNS int AS $$ SELECT $1+$2 $$LANGUAGE sql;
> 
> When usr1 is granted usage on domain mysch he can execute this function.
> (which is strange as owner didn't grant execute on this fnct,
>  I guess this is default behavior and thus ok.)
> 
> Until here, almost no PB, but after owner's:
> REVOKE ALL ON FUNCTION mysch.testaddint(int, int) FROM usr1;
> 
> usr1 still can execute the function!? (#@<!>&)
> 
> Did I missed something somewhere?
> 
> JY


-- 
A male gynecologist is like an auto mechanic who has never owned a car.
		-- Carrie Snow

In response to

pgsql-novice by date

Next:From: Vincent FicetDate: 2011-06-14 07:26:40
Subject: Passing the table name as a function argument in PLPGSQL
Previous:From: Jean-Yves F. BarbierDate: 2011-06-14 00:39:29
Subject: permissions PB

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group