Re: "grant usage on schema" confers the ability to execute all user-defined functions in that schema, with needing to grant "execute"

From: Julien Rouhaud <rjuju123(at)gmail(dot)com>
To: Adrian Klaver <adrian(dot)klaver(at)aklaver(dot)com>
Cc: Bryn Llewellyn <bryn(at)yugabyte(dot)com>, "David G(dot) Johnston" <david(dot)g(dot)johnston(at)gmail(dot)com>, Tom Lane PostgreSQL <tgl(at)sss(dot)pgh(dot)pa(dot)us>, jeremy(at)musicsmith(dot)net, pgsql-general list <pgsql-general(at)lists(dot)postgresql(dot)org>
Subject: Re: "grant usage on schema" confers the ability to execute all user-defined functions in that schema, with needing to grant "execute"
Date: 2022-02-12 05:35:10
Message-ID: 20220212053510.aunx4m7of74fqxru@jrouhaud
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On Fri, Feb 11, 2022 at 09:07:16PM -0800, Adrian Klaver wrote:
> On 2/11/22 17:24, Bryn Llewellyn wrote:
> > > > /bryn(at)yugabyte(dot)com <mailto:bryn(at)yugabyte(dot)com> wrote:/
>
> > I s'pose that I can interpret this output in the light of the "miriam"
> > example by guessing than an empty LHS means "public" and that the
> > initial "X" means "execute". It looks like what follows the slash is the
> > owner of the object (a denormalization of what the "Owner" column
> > shows.)
> >
> > *Where is this notation, "miriam=arwdDxt/miriam", explained?*
>
> Here:
> https://www.postgresql.org/docs/current/ddl-priv.html
>
> From:
>
> Table 5.1. ACL Privilege Abbreviations

You might also be interested in aclexplode() function, see
https://www.postgresql.org/docs/current/functions-info.html.

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Grzegorz Zając 2022-02-12 18:01:29 pgAdmin
Previous Message Дмитрий Иванов 2022-02-12 05:24:04 Re: Microsoft Report Builder