Hi, and thanks (both of you!) Shouldn't the create role my_user NOINHERIT; avoid this? And since not, why? :-)
On Thu, 20 Mar 2025 at 15:07, David G. Johnston <david.g.johns...@gmail.com> wrote: > On Wednesday, March 19, 2025, Cosimo Simeone <cosimo.sime...@gmail.com> > wrote: >> >> >> true? >> Well... Ok, "whatever"... I revoke it: >> =# revoke execute on function my_schema.my_func(text) from my_user; >> REVOKE >> > > Roles can inherit privileges. my_user is inheriting its execute privilege > from PUBLIC. You have to revoke a granted privilege. > > David J. > >
