Re: permission inconsistency with functions

From: Peter Eisentraut <peter_e(at)gmx(dot)net>
To: jd(at)commandprompt(dot)com
Cc: pgsql-hackers(at)postgresql(dot)org
Subject: Re: permission inconsistency with functions
Date: 2010-07-23 18:55:56
Message-ID: 1279911356.22066.0.camel@vanquo.pezone.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On fre, 2010-07-23 at 11:48 -0700, Joshua D. Drake wrote:
> "In particular, it must have read access to all tables that you want
> to
> back up, so in practice you almost always have to run it as a database
> superuser."
>
> Ignoring the fact that databases have a lot more objects than tables,
> there is no READ/SELECT permission for functions. Thus in order to
> backup a function, I must have EXECUTE permissions on the function.
> Further if I don't have EXECUTE permissions I can still see the
> function in pg_proc.

In order to back up a table's contents you must read it, but you don't
need to execute a function in order to back it up. It's not
inconsistent, it's just different.

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Robert Haas 2010-07-23 19:00:47 Re: Rewrite, normal execution vs. EXPLAIN ANALYZE
Previous Message Pavel Stehule 2010-07-23 18:55:39 Re: review: psql: edit function, show function commands patch