public inbox for [email protected]
help / color / mirror / Atom feedClarification on REVOKE ALL ON FUNCTION – Are there any privileges apart from EXECUTE?
2+ messages / 2 participants
[nested] [flat]
* Clarification on REVOKE ALL ON FUNCTION – Are there any privileges apart from EXECUTE?
@ 2025-05-18 19:17 Ayush Vatsa <[email protected]>
2025-05-18 19:21 ` Re: Clarification on REVOKE ALL ON FUNCTION – Are there any privileges apart from EXECUTE? Adrian Klaver <[email protected]>
0 siblings, 1 reply; 2+ messages in thread
From: Ayush Vatsa @ 2025-05-18 19:17 UTC (permalink / raw)
To: [email protected]
Hi Postgres Community,
I had a quick question regarding function-level privileges in PostgreSQL.
We know that REVOKE EXECUTE ON FUNCTION ... removes the ability to call the
function. But when we do:
REVOKE ALL ON FUNCTION my_func(args) FROM some_role;
does this revoke anything other than EXECUTE? Are there any other
privileges that apply to functions which get revoked via REVOKE ALL?
I looked through the documentation but couldn’t find a definitive answer on
whether ALL includes more than just EXECUTE in the context of functions.
Would appreciate any insights or pointers.
---------------
Regards,
Ayush
^ permalink raw reply [nested|flat] 2+ messages in thread
* Re: Clarification on REVOKE ALL ON FUNCTION – Are there any privileges apart from EXECUTE?
2025-05-18 19:17 Clarification on REVOKE ALL ON FUNCTION – Are there any privileges apart from EXECUTE? Ayush Vatsa <[email protected]>
@ 2025-05-18 19:21 ` Adrian Klaver <[email protected]>
0 siblings, 0 replies; 2+ messages in thread
From: Adrian Klaver @ 2025-05-18 19:21 UTC (permalink / raw)
To: Ayush Vatsa <[email protected]>; [email protected]
On 5/18/25 12:17, Ayush Vatsa wrote:
> Hi Postgres Community,
> I had a quick question regarding function-level privileges in PostgreSQL.
> We know that |REVOKE EXECUTE ON FUNCTION ...| removes the ability to
> call the function. But when we do:
> REVOKE ALL ON FUNCTION my_func(args) FROM some_role;
>
> does this revoke anything other than |EXECUTE|? Are there any other
> privileges that apply to functions which get revoked via |REVOKE ALL|?
> > I looked through the documentation but couldn’t find a definitive answer
> on whether |ALL| includes more than just |EXECUTE| in the context of
> functions.
See here:
https://www.postgresql.org/docs/current/ddl-priv.html
Table 5.1. ACL Privilege Abbreviations
This is the best way to see what privileges apply to what objects.
>
> Would appreciate any insights or pointers.
>
> ---------------
> Regards,
> Ayush
>
--
Adrian Klaver
[email protected]
^ permalink raw reply [nested|flat] 2+ messages in thread
end of thread, other threads:[~2025-05-18 19:21 UTC | newest]
Thread overview: 2+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2025-05-18 19:17 Clarification on REVOKE ALL ON FUNCTION – Are there any privileges apart from EXECUTE? Ayush Vatsa <[email protected]>
2025-05-18 19:21 ` Adrian Klaver <[email protected]>
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox