| From: | "Jean-Yves F(dot) Barbier" <12ukwn(at)gmail(dot)com> |
|---|---|
| To: | "Jean-Yves F(dot) Barbier" <12ukwn(at)gmail(dot)com> |
| Cc: | pgsql-novice(at)postgresql(dot)org |
| Subject: | Re: permissions PB [SOLVED] |
| Date: | 2011-06-14 02:23:58 |
| Message-ID: | 20110614042358.0e737b99@anubis.defcon1 |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-novice |
On Tue, 14 Jun 2011 02:39:29 +0200, "Jean-Yves F. Barbier" <12ukwn(at)gmail(dot)com>
wrote:
I didn't remember that 'public' needed to be revoked before permission could
be effective - sorry for the noise.
> The DB owner created a function as:
> CREATE FUNCTION mysch.testaddint(int, int)
> RETURNS int AS $$ SELECT $1+$2 $$LANGUAGE sql;
>
> When usr1 is granted usage on domain mysch he can execute this function.
> (which is strange as owner didn't grant execute on this fnct,
> I guess this is default behavior and thus ok.)
>
> Until here, almost no PB, but after owner's:
> REVOKE ALL ON FUNCTION mysch.testaddint(int, int) FROM usr1;
>
> usr1 still can execute the function!? (#@<!>&)
>
> Did I missed something somewhere?
>
> JY
--
A male gynecologist is like an auto mechanic who has never owned a car.
-- Carrie Snow
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Vincent Ficet | 2011-06-14 07:26:40 | Passing the table name as a function argument in PLPGSQL |
| Previous Message | Jean-Yves F. Barbier | 2011-06-14 00:39:29 | permissions PB |