Postgres Pro
Downloads
Home   >   mailing lists

Re: Execute function without execute privilege - Mailing list pgsql-novice

From Tom Lane
Subject Re: Execute function without execute privilege
Date
Msg-id 24687.1115324661@sss.pgh.pa.us
Whole thread Raw
In response to Execute function without execute privilege  ("Walker, Jed S" <Jed_Walker@cable.comcast.com>)
List pgsql-novice
Tree view 
"Walker, Jed S" <Jed_Walker@cable.comcast.com> writes:
> I discovered today that when I create a function in a schema that another
> user has "grant usage" on, they are able to execute the function even though
> I've not granted them "execute" on the function.

> Is this normal behavior (from the manual I don't believe it is)?

Yes, it is, because the default for functions is to grant PUBLIC EXECUTE
access.  Revoke that if you don't want it.

            regards, tom lane

pgsql-novice by date:

Previous
From: "Walker, Jed S"
Date:
Subject: Execute function without execute privilege
Next
From: "Cima"
Date:
Subject: downloading files