How does one go about explicitly denying the create function ability of a non superuser in postgres? I looked into the documentation, but was unable to find anything of value.

link|improve this question

67% accept rate
feedback

1 Answer

up vote 1 down vote accepted

You can look here for the documentation. You would use the Revoke command in place of grant and just specify Create.

REVOKE { { CREATE | TEMPORARY | TEMP } [,...] | ALL [ PRIVILEGES ] }
ON DATABASE dbname [, ...]
TO { username | GROUP groupname | PUBLIC } [, ...]

EDIT:

Here is where you go for Revoke, which has more options.

REVOKE [ GRANT OPTION FOR ]
{ EXECUTE | ALL [ PRIVILEGES ] }
ON FUNCTION funcname ( [ [ argmode ] [ argname ] argtype [, ...] ] ) [, ...]
FROM { username | GROUP groupname | PUBLIC } [, ...]
[ CASCADE | RESTRICT ]
link|improve this answer
That would be helpful except I need REVOKE CREATE on FUNCTION. Based on the documentation that is not an option – Woot4Moo Sep 24 '10 at 17:56
sorry, I misread. Please see edit. – MaQleod Sep 24 '10 at 18:12
ahh there we go, not enough rep to upvote you sorry – Woot4Moo Sep 24 '10 at 18:40
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.