Re: How to hide stored procedure's bodies from specific user - Mailing list pgsql-general

From Berend Tober
Subject Re: How to hide stored procedure's bodies from specific user
Date
Msg-id 54DF5C68.8070506@computer.org
Whole thread Raw
In response to Re: How to hide stored procedure's bodies from specific user  (Guillaume Lelarge <guillaume@lelarge.info>)
List pgsql-general
Guillaume Lelarge wrote:
> 2015-02-14 14:07 GMT+01:00 Berend Tober <btober@broadstripe.net
> <mailto:btober@broadstripe.net>>:
>
>     Saimon Lim wrote:
>
>         Thanks for your help
>
>         I want to restrict some postgres users as much as possible and allow
>         them to execute a few my own stored procedures only.
>
>
>     Create the function that you want restrict access to in a separate
>     'private' schema to which usage is not granted.
>
>     Create the functions you wish to allow access to in a schema to
>     which the role is granted access to.  ...
>
> Unless I misunderstood something, this doesn't protect at all the
> function source code. You can still get it by reading pg_proc.
>

Agreed, but he already knows about that and how to mitigate.





pgsql-general by date:

Previous
From: Guillaume Lelarge
Date:
Subject: Re: How to hide stored procedure's bodies from specific user
Next
From: Ramesh T
Date:
Subject: Re: Collection