Thread: grants on functions

grants on functions

From
"Marin Dimitrov"
Date:
Hi,

it seems that there is no security management related to functions in the
database (I couldn't find much info in the docs)

the GRANT operator does not accept function objects, furthermore any
database user is able to execute any other user's functions

shouldn't privileges be associated with functions too ? (similar to GRANT
EXECUTE in Oracle)

thanx,

    Marin

----
"...what you brought from your past, is of no use in your present. When
you must choose a new path, do not bring old experiences with you.
Those who strike out afresh, but who attempt to retain a little of the
old life, end up torn apart by their own memories. "




Re: grants on functions

From
Darren Ferguson
Date:
Check the threads a month or so ago this was discussed in depth.

Basically postgres uses security through the views and you grant
permissions to users for the specific views.

Darren Ferguson

On Wed, 27 Mar 2002, Marin Dimitrov wrote:

>
> Hi,
>
> it seems that there is no security management related to functions in the
> database (I couldn't find much info in the docs)
>
> the GRANT operator does not accept function objects, furthermore any
> database user is able to execute any other user's functions
>
> shouldn't privileges be associated with functions too ? (similar to GRANT
> EXECUTE in Oracle)
>
> thanx,
>
>     Marin
>
> ----
> "...what you brought from your past, is of no use in your present. When
> you must choose a new path, do not bring old experiences with you.
> Those who strike out afresh, but who attempt to retain a little of the
> old life, end up torn apart by their own memories. "
>
>
>
>
> ---------------------------(end of broadcast)---------------------------
> TIP 3: if posting/reading through Usenet, please send an appropriate
> subscribe-nomail command to majordomo@postgresql.org so that your
> message can get through to the mailing list cleanly
>