Re: How to hide stored procedure's bodies from specific user

From: Berend Tober <btober(at)broadstripe(dot)net>
To: Saimon Lim <aimon(dot)slim(at)gmail(dot)com>, pgsql-general(at)postgresql(dot)org
Subject: Re: How to hide stored procedure's bodies from specific user
Date: 2015-02-14 13:07:44
Message-ID: 54DF48A0.4060103@computer.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Saimon Lim wrote:
> Thanks for your help
>
> I want to restrict some postgres users as much as possible and allow
> them to execute a few my own stored procedures only.

Create the function that you want restrict access to in a separate
'private' schema to which usage is not granted.

Create the functions you wish to allow access to in a schema to which
the role is granted access to.

You original question was different, i.e., you were asking about hiding
your clever algorithms from inquisitive inspection. For that, similarly
use as 'private' schema where you keep you super-secret stuff, and then
provide a sanitized interface in the 'public' schema:

CREATE OR REPLACE FUNCTION private.average(a float, b float)
RETURNS float
LANGUAGE sql
AS $$
SELECT ($1 + $2)/2.;
$$;

CREATE OR REPLACE FUNCTION public.average(a float, b float)
RETURNS float
LANGUAGE sql
as $$
select private.average(a,b)
$$
security definer;

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Guillaume Lelarge 2015-02-14 14:30:07 Re: How to hide stored procedure's bodies from specific user
Previous Message Ramesh T 2015-02-14 12:58:57 Re: Collection