From: Cédric Dufour (public) <cdufour-public@cogito-ergo-soft.com>
To: pgsql-sql@postgresql.org
Subject: Grant execute on functions; related objects permissions ?
Date: Mon, 6 Jan 2003 11:12:25 +0100
Message-ID: <000401c2b56c$1c1419d0$3c8addd5@cednetwork.net> (raw)
Hello,
PostgreSQL 7.3 happily introduced permissions on functions. Now, having
granted execution to a given function to a given user, I find myself with
"access denied" errors on the objects that the function actually uses (e.g.
a table on which it makes a select). So:
1. Am I missing something about how the GRANT ... ON FUNCTION works ?
2. Is there any way to automatically obtain privileges on the objects the
function uses, without having to GRANT specific permissions on those object
(the same way it works on MS-SQL) ?
3. Am I following the wrong direction (I understand question 2. might
actually introduce a permission "hole" on the objects that functions might
use; a user might obtain access to these objects through defining its own
function, am I right ?) ?
Thank you for you help,
Cédric Dufour - Cogito Ergo Soft
_____
Cogito Ergo Soft - Your think partner
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-sql@postgresql.org
Cc: cdufour-public@cogito-ergo-soft.com
Subject: Re: Grant execute on functions; related objects permissions ?
In-Reply-To: <000401c2b56c$1c1419d0$3c8addd5@cednetwork.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox