Re: doc sql-grant.html Synopsis error? - Mailing list pgsql-general

From Adrian Klaver
Subject Re: doc sql-grant.html Synopsis error?
Date
Msg-id 9c8846fe-af91-a2ee-b565-9d55856b6081@aklaver.com
Whole thread Raw
In response to Re: doc sql-grant.html Synopsis error?  (Achilleas Mantzios <a.mantzios@cloud.gatewaynet.com>)
List pgsql-general
On 4/8/23 06:07, Achilleas Mantzios wrote:
> Στις 8/4/23 15:58, ο/η jian he έγραψε:
>>
>> Hi.
>> --work as intended.
>> grant ALL PRIVILEGES on FUNCTION pg_catalog.pg_reload_conf() to test;
>> grant ALL PRIVILEGES on FUNCTION pg_reload_conf() to test;
>>
>> -------------errors. it should be work, or I interpret the doc the 
>> wrong way?
>> GRANT ALL PRIVILEGES ON FUNCTION pg_reload_conf() IN SCHEMA pg_catalog 
>> TO test;
>> GRANT ALL PRIVILEGES ON FUNCTION pg_catalog.pg_reload_conf() IN SCHEMA 
>> pg_catalog TO test;
>>
>> doc: https://www.postgresql.org/docs/current/sql-grant.html
>> GRANT { EXECUTE | ALL [ PRIVILEGES ] }
>>      ON { { FUNCTION | PROCEDURE | ROUTINE }/|routine_name|/  [ ( [ [/|argmode|/  ] [/|arg_name|/  ]/|arg_type|/  [,
...]] ) ] [, ...]
 
>>           | ALL { FUNCTIONS | PROCEDURES | ROUTINES } IN SCHEMA/|schema_name|/  [, ...] }
>>      TO/|role_specification|/  [, ...] [ WITH GRANT OPTION ]
>>      [ GRANTED BY/|role_specification|/  ]
>> I am using postgres 16, but the grant function part does not change.
>> What did I miss?
> 
> Hello, You missed the docs. The "IN SCHEMA" version always goes with ALL 
> FUNCTIONS in the beginning. What would be the point specifying 
> pg_catalog.pg_reload_conf() IN SCHEMA pg_catalog, i.e. giving the SCHEMA 
> twice ?

To be a little clearer to use IN SCHEMA the command would be:

GRANT ALL PRIVILEGES ON ALL FUNCTIONS IN SCHEMA pg_catalog TO test;

Where ALL FUNCTIONS IN SCHEMA is a bulk operation over the functions in 
the schema per the docs:

https://www.postgresql.org/docs/current/sql-grant.html

"There is also an option to grant privileges on all objects of the same 
type within one or more schemas. This functionality is currently 
supported only for tables, sequences, functions, and procedures. ALL 
TABLES also affects views and foreign tables, just like the 
specific-object GRANT command. ALL FUNCTIONS also affects aggregate and 
window functions, but not procedures, again just like the 
specific-object GRANT command. Use ALL ROUTINES to include procedures."

Since you are looking to GRANT to a specific function you need to schema 
qualify the function name as IN SCHEMA is not available in that form of 
the command.


> 
> -- 
> Achilleas Mantzios
>   IT DEV - HEAD
>   IT DEPT
>   Dynacom Tankers Mgmt
> 

-- 
Adrian Klaver
adrian.klaver@aklaver.com




pgsql-general by date:

Previous
From: Achilleas Mantzios
Date:
Subject: Re: doc sql-grant.html Synopsis error?
Next
From: Israel Brewster
Date:
Subject: Re: [EXTERNAL]: Re: UPSERT in Postgres