[HACKERS] GRANT EXECUTE ON FUNCTION foo() TO bar(); - Mailing list pgsql-hackers

From Joel Jacobson
Subject [HACKERS] GRANT EXECUTE ON FUNCTION foo() TO bar();
Date
Msg-id CAASwCXeEQgXb5h9sZFYwKdBmwfmRnMxecSiZN6n_+Uo=yPpfXA@mail.gmail.com
Whole thread Raw
Responses Re: [HACKERS] GRANT EXECUTE ON FUNCTION foo() TO bar();  (Pavel Stehule <pavel.stehule@gmail.com>)
Re: [HACKERS] GRANT EXECUTE ON FUNCTION foo() TO bar();  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-hackers
Hi Hackers,

Currently, it's only possible to grant/revoke execute on functions to roles.

I think it would be useful in many situations, both for documentation purposes,
but also for increased security, to in a precise way control what
other function(s)
are allowed to execute a specific function.

This would be useful for functions that are not supposed to be used
manually by any human or any other function(s) than the few places
where the function makes sense to use.

Thoughts?

/Joel



pgsql-hackers by date:

Previous
From: Michael Paquier
Date:
Subject: Re: [HACKERS] Radix tree for character conversion
Next
From: Rafia Sabih
Date:
Subject: Re: [HACKERS] Passing query string to workers