Postgres Pro AXE : Documentation: 1: 12.1. Stored Procedures and Privileges : Postgres Professional

12.1. Stored Procedures and Privileges
Prev	Up	Chapter 12. Access Management	Home	Next

12.1. Stored Procedures and Privileges #

12.1.1. Stored Procedures and Privileges: pgpro_metastore
12.1.2. Stored Procedures and Privileges: pgpro_axe

This section contains tables that specify the security definer status and required privileges for all stored procedures. Security definer stored procedures are executed on behalf of the user that installed pgpro_metastore (in most cases, the superuser), but before execution, the privileges of the actual role are verified.

For more information, refer to:

Section 12.2 for configuring the Postgres Pro AXE administrator.
Section 12.4 for granting the SELECT and INSERT privileges.
The official Postgres Pro documentation for other privileges.

12.1.1. Stored Procedures and Privileges: pgpro_metastore #

Stored Procedure	Security Definer	Privileges
`define_catalog_connection`		Postgres Pro AXE administrator only
`init`		Postgres Pro AXE administrator only
`metastore.add_storage`		Postgres Pro AXE administrator only
`metastore.remove_storage`		Postgres Pro AXE administrator only
`metastore.add_table`		Postgres Pro AXE administrator only
`metastore.rename_table`		Postgres Pro AXE administrator only
`metastore.create_view`		`SELECT` privilege on the analytical table `CREATE` privilege on the Postgres Pro schema that contains the view
`metastore.remove_table`		Postgres Pro AXE administrator only
`metastore.add_column`		Postgres Pro AXE administrator only
`metastore.rename_column`		Postgres Pro AXE administrator only
`metastore.change_column_type`		Postgres Pro AXE administrator only
`metastore.delete_column`		Postgres Pro AXE administrator only
`metastore.add_schema`		Postgres Pro AXE administrator only
`metastore.remove_schema`		Postgres Pro AXE administrator only
`metastore.add_folder`		Postgres Pro AXE administrator only
`metastore.remove_folder`		Postgres Pro AXE administrator only
`metastore.add_files`		`INSERT` privilege on the analytical table `SELECT` privilege on the shared directory if Parquet files are added from this directory
`metastore.copy_table`		`INSERT` privilege on the analytical table Privilege required to execute the SQL command passed as the second parameter
`metastore.expire_snapshot_on_time`		Postgres Pro AXE administrator only
`metastore.expire_snapshot_on_ids`		Postgres Pro AXE administrator only
`metastore.delete_expired_files`		Postgres Pro AXE administrator only
`metastore.mgrant`		`GRANT` privilege on the proxy table
`metastore.mrevoke`		`REVOKE` privilege on the proxy table
`metastore.pgpro_build`		All roles

12.1.2. Stored Procedures and Privileges: pgpro_axe #

By default, pgpro_axe stored procedures are installed into the public schema. Currently, ALTER EXTENSION cannot move pgpro_axe to a different schema.

Stored Procedure	Security Definer	Privileges
`duckdb.install_extension`		Postgres Pro AXE administrator only
`duckdb.load_extension`		All roles
`duckdb.autoload_extension`		Postgres Pro AXE administrator only
`duckdb.query`		All roles
`duckdb.raw_query`		All roles
`duckdb.create_simple_secret`		Postgres Pro AXE administrator only
`duckdb.show_simple_secret`		Postgres Pro AXE administrator only
`duckdb.drop_simple_secret`		Postgres Pro AXE administrator only
`duckdb.recycle_ddb`		Postgres Pro AXE administrator only
`duckdb_external_file_cache`		Postgres Pro AXE administrator only
`cleanup`		Postgres Pro AXE administrator only
`read_parquet`		Postgres Pro AXE administrator only
`read_csv`		Postgres Pro AXE administrator only
`read_json`		Postgres Pro AXE administrator only
`iceberg_scan`		Postgres Pro AXE administrator only
`iceberg_metadata`		Postgres Pro AXE administrator only
`iceberg_snapshots`		Postgres Pro AXE administrator only
`delta_scan`		Postgres Pro AXE administrator only
`json_extract`, `json_extract_string`		Postgres Pro AXE administrator only
`json_valid`		Postgres Pro AXE administrator only
`json_type`		Postgres Pro AXE administrator only
`json_keys`		Postgres Pro AXE administrator only
`json_structure`		Postgres Pro AXE administrator only
`json_contains`		Postgres Pro AXE administrator only
`json_array_length`		Postgres Pro AXE administrator only
`json_transform`, `json_transform_strict`		Postgres Pro AXE administrator only
`json_group_array`		Postgres Pro AXE administrator only
`json_group_object`		Postgres Pro AXE administrator only
`json_group_structure`		Postgres Pro AXE administrator only
`json`		All roles
`cardinality`		Postgres Pro AXE administrator only
`map_extract_value`		Postgres Pro AXE administrator only
`map_extract`		Postgres Pro AXE administrator only
`map_concat`		Postgres Pro AXE administrator only
`map_contains`		Postgres Pro AXE administrator only
`map_contains_entry`		Postgres Pro AXE administrator only
`map_contains_value`		Postgres Pro AXE administrator only
`map_entries`		Postgres Pro AXE administrator only
`map_keys`		Postgres Pro AXE administrator only
`map_values`		Postgres Pro AXE administrator only
`map_from_entries`		Postgres Pro AXE administrator only
`map`		Postgres Pro AXE administrator only
`approx_count_distinct`		Postgres Pro AXE administrator only
`TABLESAMPLE`		Postgres Pro AXE administrator only
`time_bucket`		Postgres Pro AXE administrator only
`strftime`		Postgres Pro AXE administrator only
`strptime`		Postgres Pro AXE administrator only
`make_timestamp`		Postgres Pro AXE administrator only
`make_timestamptz`		Postgres Pro AXE administrator only

Prev	Up	Next
Chapter 12. Access Management	Home	12.2. Configuring the Postgres Pro AXE Administrator

epub pdf