Re: pg_dump and REVOKE on function - Mailing list pgsql-hackers

From Bruce Momjian
Subject Re: pg_dump and REVOKE on function
Date
Msg-id 200308310426.h7V4QT721153@candle.pha.pa.us
Whole thread Raw
In response to Re: pg_dump and REVOKE on function  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: pg_dump and REVOKE on function
List pgsql-hackers
Tom Lane wrote:
> Rod Taylor <rbt@rbt.ca> writes:
> > r=# REVOKE ALL ON FUNCTION weekdate (date) FROM PUBLIC;
> > REVOKE
> > r=# GRANT ALL ON FUNCTION weekdate (date) TO PUBLIC;
> > GRANT
> > r=# REVOKE ALL ON FUNCTION weekdate (date) FROM rbt;
> > ERROR:  dependent privileges exist
> > HINT:  Use CASCADE to revoke them too.
> 
> Ugh.  We could fix pg_dump to output the commands in a better order,
> but that won't help for dumps from existing releases.
> 
> Given that rbt is the owner of the object, I'm not sure that it is
> sensible to interpret the above as revoking his ability to grant
> privileges to others.  Seems to me that his ability to GRANT is inherent
> in being the owner, and as such his "grant option" bits are irrelevant.
> So maybe the commands are okay and the backend's interpretation is
> bogus.
> 
> Peter, any thoughts?

Has this been resolved?


--  Bruce Momjian                        |  http://candle.pha.pa.us pgman@candle.pha.pa.us               |  (610)
359-1001+  If your life is a hard drive,     |  13 Roberts Road +  Christ can be your backup.        |  Newtown Square,
Pennsylvania19073
 


pgsql-hackers by date:

Previous
From: Bruce Momjian
Date:
Subject: Re: "is_superuser" parameter creates inconsistencies
Next
From: Tom Lane
Date:
Subject: Re: pg_dump and REVOKE on function