Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1tvHV7-0033zE-G3 for pgsql-general@arkaria.postgresql.org; Thu, 20 Mar 2025 15:08:05 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1tvHU6-00302q-J7 for pgsql-general@arkaria.postgresql.org; Thu, 20 Mar 2025 15:07:02 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1tvHU6-00301P-4A for pgsql-general@lists.postgresql.org; Thu, 20 Mar 2025 15:07:02 +0000 Received: from mail-oi1-x230.google.com ([2607:f8b0:4864:20::230]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.96) (envelope-from ) id 1tvHU4-00097U-1w for pgsql-general@lists.postgresql.org; Thu, 20 Mar 2025 15:07:01 +0000 Received: by mail-oi1-x230.google.com with SMTP id 5614622812f47-3feaedb39e9so249037b6e.1 for ; Thu, 20 Mar 2025 08:07:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1742483219; x=1743088019; darn=lists.postgresql.org; h=cc:to:subject:message-id:date:from:references:in-reply-to :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=PZyrHc2tz351KtjGBcEhfoc6s849Q6RpUQz2Tv0rows=; b=KZpvPPm+Dmdym4kupXd0UozdTAgR4BNUjvHpNzH2MDttkBZeYKCergq1ZITzrYShsJ HDL8UbT6n8iQ1gB2NKzcVpGrf/r5JhkQYRvOMZk1EJy/1LvpHEVg8k1Zv9U9JVUwPskm 6Uh855QDJzi8m5suY+JAPA7HU9xtu6kD0qWtWyvgBC5rnfTbwgqw9Z74taze7zte5kgI 2l9cG+bnej+UbFyY+M6UBqITxLY/yxxxGFNnODZvb7IbONy9cPglm70t385YXD3sVGyY 5Q74zURrMuyFfiS53OWt9XpFaPIVmR6SJRKVAl1grMU0ky3CiOGvzNJqiATAho0oUM6z yfQA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1742483219; x=1743088019; h=cc:to:subject:message-id:date:from:references:in-reply-to :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=PZyrHc2tz351KtjGBcEhfoc6s849Q6RpUQz2Tv0rows=; b=uhgsVpXMe5jBq3dQvYvCR/NV3HIKAeinpS5b6eefUsgqvQxOr9/ynYTxCWcDD5ZT5T J0KQHuMZtFz+/gVVHi691YAMtMmx5XrvzaZULIXH0hBTqM+LVTbpFXT+sgvon+qwMcoJ rkpgDa8DQDj6eoEHhZWPnGuFq79lZ7vQvLh0VLN3qlY5A/Cm85Hhr9QABlhyILbc1Q+Q eI3KqA9EF35+aoF1UQwf/yx6uyoQKIfmggBJAo0MSkjayZOz0Be8vr6vBtsqfX7BYcm0 rtw01R2jB8a3NUS36g811oq/J9rbXGnLrJZ412S8+fannsnY2388tN8cp3sUfMFHySZc xwsA== X-Gm-Message-State: AOJu0YyMYbyt9D6EGOV/Zw76T2o/Q9gKLuWeNUVtbVTfZ/eMq3uedZRV 5KxMp7H+NGVV299Ze4wuu1+tQl2ipEIIRfI0ePidYQWM6D3XJEDIl4usoaGNzVeKw64LXTkXMdm V+1wB3a73Bda9C4Pl+TTdDvyIP9Q= X-Gm-Gg: ASbGncuLoADA78UfdncpDx6QmZ+TqB5tR1JGY48f/oBKBGv2zzJ3b+TYva3oSH8Ynsd bokvfPlW6wnXfLDr/EuauHWLhqbkGCMKl3Mkxzmo0utFtd6onEwImyYjsqPY9pbh3OG7FOrLL1N sz0qeFWqDC1XHbqzdDmrOIzfP9 X-Google-Smtp-Source: AGHT+IEbKqp6eqI3vTQ4ZN8tY+c8PHHN+wCGf4oxAKUzSFrDNdALhC3M7JAzd7XdYtsjgDtBFtstMhPzTkeA/oIQZ54= X-Received: by 2002:a05:6808:148e:b0:3f8:30c1:cca7 with SMTP id 5614622812f47-3fead575ab4mr4945241b6e.8.1742483219339; Thu, 20 Mar 2025 08:06:59 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a05:6802:3a0c:b0:589:13f9:e937 with HTTP; Thu, 20 Mar 2025 08:06:58 -0700 (PDT) In-Reply-To: References: From: "David G. Johnston" Date: Thu, 20 Mar 2025 08:06:58 -0700 X-Gm-Features: AQ5f1JqfQGADiEqU9PPAO5CdCNtXi697ISCu0X5UfVYkrhNH-m-HgnFjIHLqs0Q Message-ID: Subject: Re: Need help understanding has_function_privilege To: Cosimo Simeone Cc: "pgsql-general@lists.postgresql.org" Content-Type: multipart/alternative; boundary="00000000000050df9d0630c77dbd" List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --00000000000050df9d0630c77dbd Content-Type: text/plain; charset="UTF-8" On Wednesday, March 19, 2025, Cosimo Simeone wrote: > > > true? > Well... Ok, "whatever"... I revoke it: > =# revoke execute on function my_schema.my_func(text) from my_user; > REVOKE > Roles can inherit privileges. my_user is inheriting its execute privilege from PUBLIC. You have to revoke a granted privilege. David J. --00000000000050df9d0630c77dbd Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Wednesday, March 19, 2025, Cosimo Simeone <cosimo.simeone@gmail.com> wrote:

true?
Well= ... Ok, "whatever"... I revoke it:
=3D# revoke execute on= function my_schema.my_func(text) from my_user;
REVOKE
=

Roles can inherit privileges. =C2=A0= my_user is inheriting its execute privilege from PUBLIC.=C2=A0 You have to = revoke a granted privilege.

David J.
=C2= =A0
--00000000000050df9d0630c77dbd--