@@ -607,72 +607,119 @@ AS 'unicode_is_normalized';
607
607
-- can later change who can access these functions, or leave them as only
608
608
-- available to superuser / cluster owner, if they choose.
609
609
--
610
+
610
611
REVOKE EXECUTE ON FUNCTION pg_start_backup(text , boolean , boolean ) FROM public;
612
+
611
613
REVOKE EXECUTE ON FUNCTION pg_stop_backup() FROM public;
614
+
612
615
REVOKE EXECUTE ON FUNCTION pg_stop_backup(boolean , boolean ) FROM public;
616
+
613
617
REVOKE EXECUTE ON FUNCTION pg_create_restore_point(text ) FROM public;
618
+
614
619
REVOKE EXECUTE ON FUNCTION pg_switch_wal() FROM public;
620
+
615
621
REVOKE EXECUTE ON FUNCTION pg_wal_replay_pause() FROM public;
622
+
616
623
REVOKE EXECUTE ON FUNCTION pg_wal_replay_resume() FROM public;
624
+
617
625
REVOKE EXECUTE ON FUNCTION pg_rotate_logfile() FROM public;
626
+
618
627
REVOKE EXECUTE ON FUNCTION pg_reload_conf() FROM public;
628
+
619
629
REVOKE EXECUTE ON FUNCTION pg_current_logfile() FROM public;
630
+
620
631
REVOKE EXECUTE ON FUNCTION pg_current_logfile(text ) FROM public;
632
+
621
633
REVOKE EXECUTE ON FUNCTION pg_promote(boolean , integer ) FROM public;
622
634
623
635
REVOKE EXECUTE ON FUNCTION pg_stat_reset() FROM public;
636
+
624
637
REVOKE EXECUTE ON FUNCTION pg_stat_reset_shared(text ) FROM public;
638
+
625
639
REVOKE EXECUTE ON FUNCTION pg_stat_reset_slru(text ) FROM public;
640
+
626
641
REVOKE EXECUTE ON FUNCTION pg_stat_reset_single_table_counters(oid ) FROM public;
642
+
627
643
REVOKE EXECUTE ON FUNCTION pg_stat_reset_single_function_counters(oid ) FROM public;
644
+
628
645
REVOKE EXECUTE ON FUNCTION pg_stat_reset_replication_slot(text ) FROM public;
629
646
630
647
REVOKE EXECUTE ON FUNCTION lo_import(text ) FROM public;
648
+
631
649
REVOKE EXECUTE ON FUNCTION lo_import(text , oid ) FROM public;
650
+
632
651
REVOKE EXECUTE ON FUNCTION lo_export(oid , text ) FROM public;
633
652
634
653
REVOKE EXECUTE ON FUNCTION pg_ls_logdir() FROM public;
654
+
635
655
REVOKE EXECUTE ON FUNCTION pg_ls_waldir() FROM public;
656
+
636
657
REVOKE EXECUTE ON FUNCTION pg_ls_archive_statusdir() FROM public;
658
+
637
659
REVOKE EXECUTE ON FUNCTION pg_ls_tmpdir() FROM public;
660
+
638
661
REVOKE EXECUTE ON FUNCTION pg_ls_tmpdir(oid ) FROM public;
639
662
640
663
REVOKE EXECUTE ON FUNCTION pg_read_file(text ) FROM public;
664
+
641
665
REVOKE EXECUTE ON FUNCTION pg_read_file(text ,bigint ,bigint ) FROM public;
666
+
642
667
REVOKE EXECUTE ON FUNCTION pg_read_file(text ,bigint ,bigint ,boolean ) FROM public;
643
668
644
669
REVOKE EXECUTE ON FUNCTION pg_read_binary_file(text ) FROM public;
670
+
645
671
REVOKE EXECUTE ON FUNCTION pg_read_binary_file(text ,bigint ,bigint ) FROM public;
672
+
646
673
REVOKE EXECUTE ON FUNCTION pg_read_binary_file(text ,bigint ,bigint ,boolean ) FROM public;
647
674
648
675
REVOKE EXECUTE ON FUNCTION pg_replication_origin_advance(text , pg_lsn) FROM public;
676
+
649
677
REVOKE EXECUTE ON FUNCTION pg_replication_origin_create(text ) FROM public;
678
+
650
679
REVOKE EXECUTE ON FUNCTION pg_replication_origin_drop(text ) FROM public;
680
+
651
681
REVOKE EXECUTE ON FUNCTION pg_replication_origin_oid(text ) FROM public;
682
+
652
683
REVOKE EXECUTE ON FUNCTION pg_replication_origin_progress(text , boolean ) FROM public;
684
+
653
685
REVOKE EXECUTE ON FUNCTION pg_replication_origin_session_is_setup() FROM public;
686
+
654
687
REVOKE EXECUTE ON FUNCTION pg_replication_origin_session_progress(boolean ) FROM public;
688
+
655
689
REVOKE EXECUTE ON FUNCTION pg_replication_origin_session_reset() FROM public;
690
+
656
691
REVOKE EXECUTE ON FUNCTION pg_replication_origin_session_setup(text ) FROM public;
692
+
657
693
REVOKE EXECUTE ON FUNCTION pg_replication_origin_xact_reset() FROM public;
694
+
658
695
REVOKE EXECUTE ON FUNCTION pg_replication_origin_xact_setup(pg_lsn, timestamp with time zone ) FROM public;
696
+
659
697
REVOKE EXECUTE ON FUNCTION pg_show_replication_origin_status() FROM public;
660
698
661
699
REVOKE EXECUTE ON FUNCTION pg_stat_file(text ) FROM public;
700
+
662
701
REVOKE EXECUTE ON FUNCTION pg_stat_file(text ,boolean ) FROM public;
663
702
664
703
REVOKE EXECUTE ON FUNCTION pg_ls_dir(text ) FROM public;
704
+
665
705
REVOKE EXECUTE ON FUNCTION pg_ls_dir(text ,boolean ,boolean ) FROM public;
666
706
667
707
--
668
708
-- We also set up some things as accessible to standard roles.
669
709
--
710
+
670
711
GRANT EXECUTE ON FUNCTION pg_ls_logdir() TO pg_monitor;
712
+
671
713
GRANT EXECUTE ON FUNCTION pg_ls_waldir() TO pg_monitor;
714
+
672
715
GRANT EXECUTE ON FUNCTION pg_ls_archive_statusdir() TO pg_monitor;
716
+
673
717
GRANT EXECUTE ON FUNCTION pg_ls_tmpdir() TO pg_monitor;
718
+
674
719
GRANT EXECUTE ON FUNCTION pg_ls_tmpdir(oid ) TO pg_monitor;
675
720
676
721
GRANT pg_read_all_settings TO pg_monitor;
722
+
677
723
GRANT pg_read_all_stats TO pg_monitor;
724
+
678
725
GRANT pg_stat_scan_tables TO pg_monitor;
0 commit comments