GRANT EXECUTE ON FUNCTION foo() TO bar();

From: Joel Jacobson <joel(at)trustly(dot)com>
To: Pg Hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: GRANT EXECUTE ON FUNCTION foo() TO bar();
Date: 2017-02-22 07:06:35
Message-ID: CAASwCXeEQgXb5h9sZFYwKdBmwfmRnMxecSiZN6n_+Uo=yPpfXA@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Hi Hackers,

Currently, it's only possible to grant/revoke execute on functions to roles.

I think it would be useful in many situations, both for documentation purposes,
but also for increased security, to in a precise way control what
other function(s)
are allowed to execute a specific function.

This would be useful for functions that are not supposed to be used
manually by any human or any other function(s) than the few places
where the function makes sense to use.

Thoughts?

/Joel

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Rafia Sabih 2017-02-22 07:10:23 Re: Passing query string to workers
Previous Message Michael Paquier 2017-02-22 07:06:14 Re: Radix tree for character conversion