Execute permission to function

Started by arun chirappurathalmost 2 years ago6 messagesgeneral
Jump to latest
#1arun chirappurath
arunsnmimt@gmail.com

Hi all

I am using rds postgres 14. I have created few users and added them to
pg_readall_data and pg_write_alldata groups

They are able to read all data and do update in tables

However they can't execute functions and not able to script out objects
from pg_admin

Any other role to be added?

Thanks,
Arun

#2Ron
ronljohnsonjr@gmail.com
In reply to: arun chirappurath (#1)
Re: Execute permission to function

On Mon, Jun 24, 2024 at 6:29 AM arun chirappurath <arunsnmimt@gmail.com>
wrote:

Hi all

I am using rds postgres 14. I have created few users and added them to
pg_readall_data and pg_write_alldata groups

They are able to read all data and do update in tables

However they can't execute functions

https://www.postgresql.org/docs/14/sql-grant.html

and not able to script out objects from pg_admin

What error message(s)?

#3David G. Johnston
david.g.johnston@gmail.com
In reply to: arun chirappurath (#1)
Re: Execute permission to function

On Monday, June 24, 2024, arun chirappurath <arunsnmimt@gmail.com> wrote:

However they can't execute functions

Community PG at least gives the public pseudo-role permission to execute
all functions it can see (i.e., schema access permitted).

But no, there is no predefined role that enables that function execution.
The per-object grant system is required.

David J.

#4Adrian Klaver
adrian.klaver@aklaver.com
In reply to: arun chirappurath (#1)
Re: Execute permission to function

On 6/24/24 03:29, arun chirappurath wrote:

Hi all

I am using rds postgres 14. I have created few users and added them to
pg_readall_data and pg_write_alldata groups

They are able to read all data and do update in tables

However they can't execute functions and not able to script out objects
from pg_admin

The above are two separate issues. Provide examples of what you are
doing and the errors you get when you do them.

Any other role to be added?

You probably should take a look at:

https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Appendix.PostgreSQL.CommonDBATasks.Roles.html#Appendix.PostgreSQL.CommonDBATasks.Access

Thanks,
Arun

--
Adrian Klaver
adrian.klaver@aklaver.com

#5arun chirappurath
arunsnmimt@gmail.com
In reply to: Ron (#2)
Re: Execute permission to function

Hi,

Only see select script here in pg_admin..

[image: image.png]

Thanks,
Arun

On Mon, 24 Jun 2024 at 18:25, Ron Johnson <ronljohnsonjr@gmail.com> wrote:

Show quoted text

On Mon, Jun 24, 2024 at 6:29 AM arun chirappurath <arunsnmimt@gmail.com>
wrote:

Hi all

I am using rds postgres 14. I have created few users and added them to
pg_readall_data and pg_write_alldata groups

They are able to read all data and do update in tables

However they can't execute functions

https://www.postgresql.org/docs/14/sql-grant.html

and not able to script out objects from pg_admin

What error message(s)?

Attachments:

image.pngimage/png; name=image.pngDownload+2-1
#6Adrian Klaver
adrian.klaver@aklaver.com
In reply to: arun chirappurath (#5)
Re: Execute permission to function

On 6/24/24 11:10 AM, arun chirappurath wrote:

Hi,

Only see select script here in pg_admin..

I don't see any active servers in the Browser pane.

Have you done?:

https://www.pgadmin.org/docs/pgadmin4/8.8/connecting.html

If you have set up a server what connection parameters did you use?

Do those parameters work if you try to connect with psql?

If not what is the complete error message?

image.png

Thanks,
Arun

On Mon, 24 Jun 2024 at 18:25, Ron Johnson <ronljohnsonjr@gmail.com
<mailto:ronljohnsonjr@gmail.com>> wrote:

On Mon, Jun 24, 2024 at 6:29 AM arun chirappurath
<arunsnmimt@gmail.com <mailto:arunsnmimt@gmail.com>> wrote:

Hi all

I am using rds postgres 14. I have created few users and added
them to pg_readall_data and pg_write_alldata groups

They are able to read all data and do update in tables

However they can't execute functions

https://www.postgresql.org/docs/14/sql-grant.html
<https://www.postgresql.org/docs/14/sql-grant.html&gt;

and not able to script out objects from pg_admin

What error message(s)?

--
Adrian Klaver
adrian.klaver@aklaver.com