Postgres Pro AXE : Documentation: 1: 18.1. Stored Procedures and Privileges : Postgres Professional

18.1. Stored Procedures and Privileges
Prev	Up	Chapter 18. Access Management	Home	Next

18.1. Stored Procedures and Privileges #

The table below specifies the security definer status and required privileges for all stored procedures. Security definer stored procedures are executed on behalf of the user that installed pgpro_metastore (in most cases, the superuser), but before execution, the privileges of the actual role are verified.

For more information, refer to:

Section 18.2 for configuring the Postgres Pro AXE administrator.
Section 18.4 for granting the SELECT and INSERT privileges.
The official Postgres Pro documentation for other privileges.

Stored Procedure	Security Definer	Privileges
pgpro_metastore
`define_catalog_connection`		Postgres Pro AXE administrator only
`init`		Postgres Pro AXE administrator only
`metastore.add_storage`		Postgres Pro AXE administrator only
`metastore.remove_storage`		Postgres Pro AXE administrator only
`metastore.add_table`		Postgres Pro AXE administrator only
`metastore.rename_table`		Postgres Pro AXE administrator only
`metastore.create_view`		`SELECT` privilege on the analytical table `CREATE` privilege on the Postgres Pro schema that contains the view
`metastore.remove_table`		Postgres Pro AXE administrator only
`metastore.add_column`		Postgres Pro AXE administrator only
`metastore.rename_column`		Postgres Pro AXE administrator only
`metastore.change_column_type`		Postgres Pro AXE administrator only
`metastore.delete_column`		Postgres Pro AXE administrator only
`metastore.add_schema`		Postgres Pro AXE administrator only
`metastore.remove_schema`		Postgres Pro AXE administrator only
`metastore.add_folder`		Postgres Pro AXE administrator only
`metastore.remove_folder`		Postgres Pro AXE administrator only
`metastore.add_files`		`INSERT` privilege on the analytical table `SELECT` privilege on the shared directory if Parquet files are added from this directory
`metastore.copy_table`		`INSERT` privilege on the analytical table Privilege required to execute the SQL command passed as the second parameter
`metastore.expire_snapshot_on_time`		Postgres Pro AXE administrator only
`metastore.expire_snapshot_on_ids`		Postgres Pro AXE administrator only
`metastore.delete_expired_files`		Postgres Pro AXE administrator only
`metastore.mgrant`		`GRANT` privilege on the proxy table
`metastore.mrevoke`		`REVOKE` privilege on the proxy table
`metastore.pgpro_build`		All roles
pgpro_axe
`duckdb.install_extension`		Postgres Pro AXE administrator only
`duckdb.create_simple_secret`		Postgres Pro AXE administrator only
`duckdb.show_simple_secret`		Postgres Pro AXE administrator only
`duckdb.drop_simple_secret`		Postgres Pro AXE administrator only
`duckdb.recycle_ddb`		Postgres Pro AXE administrator only
`duckdb_external_file_cache`		Postgres Pro AXE administrator only
`cleanup`		Postgres Pro AXE administrator only
`read_parquet`		Postgres Pro AXE administrator only
`read_csv`		Postgres Pro AXE administrator only
`read_json`		Postgres Pro AXE administrator only
`iceberg_scan`		Postgres Pro AXE administrator only
`iceberg_metadata`		Postgres Pro AXE administrator only
`iceberg_snapshots`		Postgres Pro AXE administrator only
`delta_scan`		Postgres Pro AXE administrator only

Prev	Up	Next
Chapter 18. Access Management	Home	18.2. Configuring the Postgres Pro AXE Administrator

epub pdf