From: | "Jean-Yves F(dot) Barbier" <12ukwn(at)gmail(dot)com> |
---|---|
To: | "Jean-Yves F(dot) Barbier" <12ukwn(at)gmail(dot)com> |
Cc: | pgsql-novice(at)postgresql(dot)org |
Subject: | Re: permissions PB [SOLVED] |
Date: | 2011-06-14 02:23:58 |
Message-ID: | 20110614042358.0e737b99@anubis.defcon1 |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-novice |
On Tue, 14 Jun 2011 02:39:29 +0200, "Jean-Yves F. Barbier" <12ukwn(at)gmail(dot)com>
wrote:
I didn't remember that 'public' needed to be revoked before permission could
be effective - sorry for the noise.
> The DB owner created a function as:
> CREATE FUNCTION mysch.testaddint(int, int)
> RETURNS int AS $$ SELECT $1+$2 $$LANGUAGE sql;
>
> When usr1 is granted usage on domain mysch he can execute this function.
> (which is strange as owner didn't grant execute on this fnct,
> I guess this is default behavior and thus ok.)
>
> Until here, almost no PB, but after owner's:
> REVOKE ALL ON FUNCTION mysch.testaddint(int, int) FROM usr1;
>
> usr1 still can execute the function!? (#@<!>&)
>
> Did I missed something somewhere?
>
> JY
--
A male gynecologist is like an auto mechanic who has never owned a car.
-- Carrie Snow
From | Date | Subject | |
---|---|---|---|
Next Message | Vincent Ficet | 2011-06-14 07:26:40 | Passing the table name as a function argument in PLPGSQL |
Previous Message | Jean-Yves F. Barbier | 2011-06-14 00:39:29 | permissions PB |