Grant execute on functions; related objects permissions ? - Mailing list pgsql-sql

From Cédric Dufour (public)
Subject Grant execute on functions; related objects permissions ?
Date
Msg-id 000401c2b56c$1c1419d0$3c8addd5@cednetwork.net
Whole thread Raw
List pgsql-sql
Hello,

PostgreSQL 7.3 happily introduced permissions on functions. Now, having
granted execution to a given function to a given user, I find myself with
"access denied" errors on the objects that the function actually uses (e.g.
a table on which it makes a select). So:

1. Am I missing something about how the GRANT ... ON FUNCTION works ?

2. Is there any way to automatically obtain privileges on the objects the
function uses, without having to GRANT specific permissions on those object
(the same way it works on MS-SQL) ?

3. Am I following the wrong direction (I understand question 2. might
actually introduce a permission "hole" on the objects that functions might
use; a user might obtain access to these objects through defining its own
function, am I right ?) ?

Thank you for you help,

Cédric Dufour - Cogito Ergo Soft _____

Cogito Ergo Soft - Your think partner




pgsql-sql by date:

Previous
From: Ludwig Lim
Date:
Subject: Re: Deleting in order from a table
Next
From: "Tambet Matiisen"
Date:
Subject: Re: Grant execute on functions; related objects permissions ?