Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

How does one go about explicitly denying the create function ability of a non superuser in postgres? I looked into the documentation, but was unable to find anything of value.

share|improve this question

1 Answer 1

up vote 1 down vote accepted

You can look here for the documentation. You would use the Revoke command in place of grant and just specify Create.

REVOKE { { CREATE | TEMPORARY | TEMP } [,...] | ALL [ PRIVILEGES ] }
ON DATABASE dbname [, ...]
TO { username | GROUP groupname | PUBLIC } [, ...]

EDIT:

Here is where you go for Revoke, which has more options.

REVOKE [ GRANT OPTION FOR ]
{ EXECUTE | ALL [ PRIVILEGES ] }
ON FUNCTION funcname ( [ [ argmode ] [ argname ] argtype [, ...] ] ) [, ...]
FROM { username | GROUP groupname | PUBLIC } [, ...]
[ CASCADE | RESTRICT ]
share|improve this answer
    
That would be helpful except I need REVOKE CREATE on FUNCTION. Based on the documentation that is not an option –  Woot4Moo Sep 24 '10 at 17:56
    
sorry, I misread. Please see edit. –  MaQleod Sep 24 '10 at 18:12
    
ahh there we go, not enough rep to upvote you sorry –  Woot4Moo Sep 24 '10 at 18:40

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.