No warning for a no-op REVOKE

Поиск
Список
Период
Сортировка
От Christophe Pettus
Тема No warning for a no-op REVOKE
Дата
Msg-id B3BA06C0-EB3B-4AE7-8C03-61A8E4D13971@thebuild.com
обсуждение исходный текст
Ответы Re: No warning for a no-op REVOKE
Re: No warning for a no-op REVOKE
Список pgsql-general
Right now, if you do a REVOKE that doesn't actually revoke anything, it works silently.  This can be a bit of a
foot-gun. For example: 

    CREATE FUNCTION f() RETURNS int as $$ SELECT 1; $$ LANGUAGE sql;
    REVOKE EXECUTE ON FUNCTION f() FROM lowpriv;

Naively, it might be expected that `lowpriv` can't execute the function, but unless default privileges have been
changed,`lowpriv` still can under the default grant of EXECUTE to PUBLIC.  Since there was no previous grant to
`lowpriv`,nothing actually changes in the ACL.  This bit a client recently. 

Is it worth generating a warning in this case?


В списке pgsql-general по дате отправления:

Предыдущее
От: Christophe Pettus
Дата:
Сообщение: Re: Is this a buggy behavior?
Следующее
От: Daniel Gustafsson
Дата:
Сообщение: Re: No warning for a no-op REVOKE