On Tue, 14 Jun 2011 02:39:29 +0200, "Jean-Yves F. Barbier" <12ukwn(at)gmail(dot)com>
I didn't remember that 'public' needed to be revoked before permission could
be effective - sorry for the noise.
> The DB owner created a function as:
> CREATE FUNCTION mysch.testaddint(int, int)
> RETURNS int AS $$ SELECT $1+$2 $$LANGUAGE sql;
> When usr1 is granted usage on domain mysch he can execute this function.
> (which is strange as owner didn't grant execute on this fnct,
> I guess this is default behavior and thus ok.)
> Until here, almost no PB, but after owner's:
> REVOKE ALL ON FUNCTION mysch.testaddint(int, int) FROM usr1;
> usr1 still can execute the function!? (#@<!>&)
> Did I missed something somewhere?
A male gynecologist is like an auto mechanic who has never owned a car.
-- Carrie Snow
In response to
pgsql-novice by date
|Next:||From: Vincent Ficet||Date: 2011-06-14 07:26:40|
|Subject: Passing the table name as a function argument in PLPGSQL|
|Previous:||From: Jean-Yves F. Barbier||Date: 2011-06-14 00:39:29|
|Subject: permissions PB|