Jerry Sievers writes:
> If I understand correctly how it works, public execute is granted in
> the default case of no rows returned as seen in the first case AND
> when we get a row with grantee=0 and privilege='execute'.
> select (aclexplode(proacl)).* from pg_proc where proname = 'foo';
I don
Todd, there is no auditing that will answer the question *when* (in
terms of when change took place), strictly speaking.
But anyway, have a look at the functions acl* and inparticular
aclexplode as seen below.
If I understand correctly how it works, public execute is granted in
the default case o
Todd Kover writes:
> This revocation from public happens in our environment. Trouble is, I
> can not find where an indiciation that execute has been revoked from
> public in pg_catalog.pg_proc (or any other table for that matter). Is
> there a way to find this somewhere in the catalog?
pg_proc.
