Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1sLjX0-00GHU7-Eu for pgsql-general@arkaria.postgresql.org; Mon, 24 Jun 2024 13:14:50 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1sLjWx-009TIr-KT for pgsql-general@arkaria.postgresql.org; Mon, 24 Jun 2024 13:14:47 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1sLjWx-009TIf-7I for pgsql-general@lists.postgresql.org; Mon, 24 Jun 2024 13:14:47 +0000 Received: from mail-oo1-xc2d.google.com ([2607:f8b0:4864:20::c2d]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1sLjWu-003JBc-Rb for pgsql-general@lists.postgresql.org; Mon, 24 Jun 2024 13:14:46 +0000 Received: by mail-oo1-xc2d.google.com with SMTP id 006d021491bc7-5c19d338401so2067846eaf.0 for ; Mon, 24 Jun 2024 06:14:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1719234883; x=1719839683; darn=lists.postgresql.org; h=cc:to:subject:message-id:date:from:references:in-reply-to :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=4E2bpFBloKiZHME5oClRPhssFFKNl567d9MjpW/b6QM=; b=bMg4+Xk9zY/mJ/+KVeqf84t/Pt1UofnVNRxDdkwIiPH3VqOeEe8s2UHOv7KNopeHuC dPOL6o7PrOX887aS4LZtF7DPQ/dQHdR6Hyn/vJCV6li/gRy0vE2Or1gqSQHWUjepJqHb qJ8SIHwKysEReZqvJNukKjsUbn3WGiA7wjB6TIGm5jwxIYy4/9a5Xb9t5frmn5gr9Jxz gPHtlaYTZ5axdTQuPOe1lTJ11aKd2vOL2lnaNFWiawoAoTch9oVpQQw4aGFDqnd142o7 wBeTMERfJefF5+SawH7f7sfRG4G6FZdkuXFpV1R83O2VVjg2ysdYF7T0Np6c4DpuGScO /tnA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1719234883; x=1719839683; h=cc:to:subject:message-id:date:from:references:in-reply-to :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=4E2bpFBloKiZHME5oClRPhssFFKNl567d9MjpW/b6QM=; b=Mz2lOJpryo34bqJ4p37lV9dWUqj2IJ0TpIAzxaB8ejRj2VE5/wtApd/mJJT0VaI/hE ZWp/jo3M5bGWSYKN4KTGr8djqrivP0v3KP8r5rvXzhC77v+j9VXbxL0Ns3u9dEDZxnwN 3ycVo2Oai8e5dNhRqy2n3To9IHIPDKjwxT6FqKdA2kP48YL+bL4PSmvockxZ9yt50ivy TbNBgVnkTmfp6aF8jFswYsS5kwVyRYIl1TNQNF4cmCmgpdhdXWOpIxuCsroXD90uDK4d IOpmSC1WIXzxT580UWS+sjW0HN7X6Z5Atn/aS0s/OoqgPDovTqRSAdM3ttSs5WU1zxP1 Dylw== X-Gm-Message-State: AOJu0YwWM5lrzivVqxa8mp0HMR6QeqgEsdae57yiL2I0GMgT0rKo/4N7 mvHbcMgfXjnuype1HdZQVZyHq517SUlLFelxKGtyJih74J/g6zlOedfIHZj3mXce4HjtqaGzfi0 Fa/z1uajaCyASzxpfjBttRkkQt0uP+Q== X-Google-Smtp-Source: AGHT+IHeXOy7D9ya+KPpwu0mL0HqFlgDjlcaN2Qw4tHyI5v2KFHwRv6v//8IwEYrOrBx/zoakvNPFYdlsJG9+y49mbE= X-Received: by 2002:a4a:634a:0:b0:5bd:ae80:865b with SMTP id 006d021491bc7-5c1eedd5795mr3779073eaf.9.1719234882719; Mon, 24 Jun 2024 06:14:42 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a05:6802:1009:b0:539:aa10:6c7 with HTTP; Mon, 24 Jun 2024 06:14:42 -0700 (PDT) In-Reply-To: References: From: "David G. Johnston" Date: Mon, 24 Jun 2024 06:14:42 -0700 Message-ID: Subject: Re: Execute permission to function To: arun chirappurath Cc: "pgsql-general@lists.postgresql.org" Content-Type: multipart/alternative; boundary="0000000000007856fe061ba2908f" List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --0000000000007856fe061ba2908f Content-Type: text/plain; charset="UTF-8" On Monday, June 24, 2024, arun chirappurath wrote: > > However they can't execute functions > Community PG at least gives the public pseudo-role permission to execute all functions it can see (i.e., schema access permitted). But no, there is no predefined role that enables that function execution. The per-object grant system is required. David J. --0000000000007856fe061ba2908f Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Monday, June 24, 2024, arun chirappurath <arunsnmimt@gmail.com> wrote:

How= ever they can't execute functions

Community PG at least gives the public pseudo-role permission to exe= cute all functions it can see (i.e., schema access permitted).
But no, there is no predefined role that enables that function= execution.=C2=A0 The per-object grant system is required.

David J.

--0000000000007856fe061ba2908f--