permission inconsistency with functions
in [PgSql]
|
Prev: [HACKERS] permission inconsistency with functions
Next: pgsql-hackers@news.hub.org, Special cures for men at reasonable prices! Try and become a lover #1!
From: Peter Eisentraut on 23 Jul 2010 14:55 On fre, 2010-07-23 at 11:48 -0700, Joshua D. Drake wrote: > "In particular, it must have read access to all tables that you want > to > back up, so in practice you almost always have to run it as a database > superuser." > > Ignoring the fact that databases have a lot more objects than tables, > there is no READ/SELECT permission for functions. Thus in order to > backup a function, I must have EXECUTE permissions on the function. > Further if I don't have EXECUTE permissions I can still see the > function in pg_proc. In order to back up a table's contents you must read it, but you don't need to execute a function in order to back it up. It's not inconsistent, it's just different. -- Sent via pgsql-hackers mailing list (pgsql-hackers(a)postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers
From: "Joshua D. Drake" on 23 Jul 2010 15:04
On Fri, 2010-07-23 at 21:55 +0300, Peter Eisentraut wrote: > On fre, 2010-07-23 at 11:48 -0700, Joshua D. Drake wrote: > > "In particular, it must have read access to all tables that you want > > to > > back up, so in practice you almost always have to run it as a database > > superuser." > > > > Ignoring the fact that databases have a lot more objects than tables, > > there is no READ/SELECT permission for functions. Thus in order to > > backup a function, I must have EXECUTE permissions on the function. > > Further if I don't have EXECUTE permissions I can still see the > > function in pg_proc. > > In order to back up a table's contents you must read it, but you don't > need to execute a function in order to back it up. It's not > inconsistent, it's just different. Sorry you are correct, I made a mistake in my ERROR message reading. JD -- PostgreSQL.org Major Contributor Command Prompt, Inc: http://www.commandprompt.com/ - 509.416.6579 Consulting, Training, Support, Custom Development, Engineering http://twitter.com/cmdpromptinc | http://identi.ca/commandprompt -- Sent via pgsql-hackers mailing list (pgsql-hackers(a)postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers |