Feedback-ID: i76984098:Fastmail
Message-ID: <008d95bc-591b-458e-914c-9f402f5157ec@aklaver.com>
Date: Sun, 18 May 2025 12:21:33 -0700
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: =?UTF-8?Q?Re=3A_Clarification_on_REVOKE_ALL_ON_FUNCTION_=E2=80=93_A?=
 =?UTF-8?Q?re_there_any_privileges_apart_from_EXECUTE=3F?=
To: Ayush Vatsa <ayushvatsa1810@gmail.com>, pgsql-general@lists.postgresql.org
References: <CACX+KaOyuhOf6qcA1jj2AMAhwt_ofXHU2nqE31SmJ+-0qVhU1g@mail.gmail.com>
Content-Language: en-US
From: Adrian Klaver <adrian.klaver@aklaver.com>
In-Reply-To: <CACX+KaOyuhOf6qcA1jj2AMAhwt_ofXHU2nqE31SmJ+-0qVhU1g@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Archived-At: <https://www.postgresql.org/message-id/008d95bc-591b-458e-914c-9f402f5157ec%40aklaver.com>
Precedence: bulk

On 5/18/25 12:17, Ayush Vatsa wrote:
> Hi Postgres Community,
> I had a quick question regarding function-level privileges in PostgreSQL.
> We know that |REVOKE EXECUTE ON FUNCTION ...| removes the ability to 
> call the function. But when we do:
> REVOKE ALL ON FUNCTION my_func(args) FROM some_role;
> 
> does this revoke anything other than |EXECUTE|? Are there any other 
> privileges that apply to functions which get revoked via |REVOKE ALL|?
>  > I looked through the documentation but couldn’t find a definitive answer
> on whether |ALL| includes more than just |EXECUTE| in the context of 
> functions.

See here:

https://www.postgresql.org/docs/current/ddl-priv.html

Table 5.1. ACL Privilege Abbreviations

This is the best way to see what privileges apply to what objects.

> 
> Would appreciate any insights or pointers.
> 
> ---------------
> Regards,
> Ayush
> 

-- 
Adrian Klaver
adrian.klaver@aklaver.com