Hi, and thanks (both of you!)
Shouldn't the
create role my_user NOINHERIT;
avoid this? And since not, why? :-)
On Thu, 20 Mar 2025 at 15:07, David G. Johnston <david(dot)g(dot)johnston(at)gmail(dot)com>
wrote:
> On Wednesday, March 19, 2025, Cosimo Simeone <cosimo(dot)simeone(at)gmail(dot)com>
> wrote:
>>
>>
>> true?
>> Well... Ok, "whatever"... I revoke it:
>> =# revoke execute on function my_schema.my_func(text) from my_user;
>> REVOKE
>>
>
> Roles can inherit privileges. my_user is inheriting its execute privilege
> from PUBLIC. You have to revoke a granted privilege.
>
> David J.
>
>