MIME-Version: 1.0
From: Ayush Vatsa <ayushvatsa1810@gmail.com>
Date: Mon, 19 May 2025 00:47:13 +0530
Message-ID: <CACX+KaOyuhOf6qcA1jj2AMAhwt_ofXHU2nqE31SmJ+-0qVhU1g@mail.gmail.com>
Subject: =?UTF-8?Q?Clarification_on_REVOKE_ALL_ON_FUNCTION_=E2=80=93_Are_ther?=
	=?UTF-8?Q?e_any_privileges_apart_from_EXECUTE=3F?=
To: pgsql-general@lists.postgresql.org
Content-Type: multipart/alternative; boundary="000000000000914cf006356ddde0"
Archived-At: <https://www.postgresql.org/message-id/CACX%2BKaOyuhOf6qcA1jj2AMAhwt_ofXHU2nqE31SmJ%2B-0qVhU1g%40mail.gmail.com>
Precedence: bulk

--000000000000914cf006356ddde0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi Postgres Community,
I had a quick question regarding function-level privileges in PostgreSQL.
We know that REVOKE EXECUTE ON FUNCTION ... removes the ability to call the
function. But when we do:
REVOKE ALL ON FUNCTION my_func(args) FROM some_role;

does this revoke anything other than EXECUTE? Are there any other
privileges that apply to functions which get revoked via REVOKE ALL?

I looked through the documentation but couldn=E2=80=99t find a definitive a=
nswer on
whether ALL includes more than just EXECUTE in the context of functions.

Would appreciate any insights or pointers.

---------------
Regards,
Ayush

--000000000000914cf006356ddde0
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi Postgres Community,<div>I had a quick question regardin=
g function-level privileges in PostgreSQL.</div><div>We know that <code>REV=
OKE EXECUTE ON FUNCTION ...</code> removes the ability to call the function=
. But when we do:</div><div>REVOKE ALL ON FUNCTION my_func(args) FROM some_=
role;<br></div><div><p>does this revoke anything other than <code>EXECUTE</=
code>? Are there any other privileges that apply to functions which get rev=
oked via <code>REVOKE ALL</code>?</p>
<p>I looked through the documentation but couldn=E2=80=99t find a definitiv=
e answer on whether <code>ALL</code> includes more than just <code>EXECUTE<=
/code> in the context of functions.</p>
<p>Would appreciate any insights or pointers.</p><p>---------------<br>Rega=
rds,<br>Ayush</p></div></div>

--000000000000914cf006356ddde0--