"Carel Combrink" <s25291930@tuks.co.za> writes:
> I have a few schemas and would like to revoke access for a user on
> some functions and tables in the schema and grant access to other
> functions and tables in the schema.
> I have tried to grant the access to the functions but then when that
> user tries to call the funciton it says that he does not have access
> to the schema. So I've tried to GRANT USAGE on the schema but then the
> user have access to all the functions in the schema. So lastly I have
> treid to revoke usage from a function but the user can still call the
> function.
The default privileges on functions include public execute access.
To restrict usage of a function that's in an open schema, you'd need to
REVOKE EXECUTE ... FROM PUBLIC, then grant execute privilege to just the
people who should have it.
regards, tom lane
