@@ -607,72 +607,119 @@ AS 'unicode_is_normalized';
607
607
-- can later change who can access these functions, or leave them as only
608
608
-- available to superuser / cluster owner, if they choose.
609
609
--
610
+
610
611
REVOKE EXECUTEON FUNCTION pg_start_backup(text ,boolean ,boolean )FROM public;
612
+
611
613
REVOKE EXECUTEON FUNCTION pg_stop_backup()FROM public;
614
+
612
615
REVOKE EXECUTEON FUNCTION pg_stop_backup(boolean ,boolean )FROM public;
616
+
613
617
REVOKE EXECUTEON FUNCTION pg_create_restore_point(text )FROM public;
618
+
614
619
REVOKE EXECUTEON FUNCTION pg_switch_wal()FROM public;
620
+
615
621
REVOKE EXECUTEON FUNCTION pg_wal_replay_pause()FROM public;
622
+
616
623
REVOKE EXECUTEON FUNCTION pg_wal_replay_resume()FROM public;
624
+
617
625
REVOKE EXECUTEON FUNCTION pg_rotate_logfile()FROM public;
626
+
618
627
REVOKE EXECUTEON FUNCTION pg_reload_conf()FROM public;
628
+
619
629
REVOKE EXECUTEON FUNCTION pg_current_logfile()FROM public;
630
+
620
631
REVOKE EXECUTEON FUNCTION pg_current_logfile(text )FROM public;
632
+
621
633
REVOKE EXECUTEON FUNCTION pg_promote(boolean ,integer )FROM public;
622
634
623
635
REVOKE EXECUTEON FUNCTION pg_stat_reset()FROM public;
636
+
624
637
REVOKE EXECUTEON FUNCTION pg_stat_reset_shared(text )FROM public;
638
+
625
639
REVOKE EXECUTEON FUNCTION pg_stat_reset_slru(text )FROM public;
640
+
626
641
REVOKE EXECUTEON FUNCTION pg_stat_reset_single_table_counters(oid )FROM public;
642
+
627
643
REVOKE EXECUTEON FUNCTION pg_stat_reset_single_function_counters(oid )FROM public;
644
+
628
645
REVOKE EXECUTEON FUNCTION pg_stat_reset_replication_slot(text )FROM public;
629
646
630
647
REVOKE EXECUTEON FUNCTION lo_import(text )FROM public;
648
+
631
649
REVOKE EXECUTEON FUNCTION lo_import(text ,oid )FROM public;
650
+
632
651
REVOKE EXECUTEON FUNCTION lo_export(oid ,text )FROM public;
633
652
634
653
REVOKE EXECUTEON FUNCTION pg_ls_logdir()FROM public;
654
+
635
655
REVOKE EXECUTEON FUNCTION pg_ls_waldir()FROM public;
656
+
636
657
REVOKE EXECUTEON FUNCTION pg_ls_archive_statusdir()FROM public;
658
+
637
659
REVOKE EXECUTEON FUNCTION pg_ls_tmpdir()FROM public;
660
+
638
661
REVOKE EXECUTEON FUNCTION pg_ls_tmpdir(oid )FROM public;
639
662
640
663
REVOKE EXECUTEON FUNCTION pg_read_file(text )FROM public;
664
+
641
665
REVOKE EXECUTEON FUNCTION pg_read_file(text ,bigint ,bigint )FROM public;
666
+
642
667
REVOKE EXECUTEON FUNCTION pg_read_file(text ,bigint ,bigint ,boolean )FROM public;
643
668
644
669
REVOKE EXECUTEON FUNCTION pg_read_binary_file(text )FROM public;
670
+
645
671
REVOKE EXECUTEON FUNCTION pg_read_binary_file(text ,bigint ,bigint )FROM public;
672
+
646
673
REVOKE EXECUTEON FUNCTION pg_read_binary_file(text ,bigint ,bigint ,boolean )FROM public;
647
674
648
675
REVOKE EXECUTEON FUNCTION pg_replication_origin_advance(text , pg_lsn)FROM public;
676
+
649
677
REVOKE EXECUTEON FUNCTION pg_replication_origin_create(text )FROM public;
678
+
650
679
REVOKE EXECUTEON FUNCTION pg_replication_origin_drop(text )FROM public;
680
+
651
681
REVOKE EXECUTEON FUNCTION pg_replication_origin_oid(text )FROM public;
682
+
652
683
REVOKE EXECUTEON FUNCTION pg_replication_origin_progress(text ,boolean )FROM public;
684
+
653
685
REVOKE EXECUTEON FUNCTION pg_replication_origin_session_is_setup()FROM public;
686
+
654
687
REVOKE EXECUTEON FUNCTION pg_replication_origin_session_progress(boolean )FROM public;
688
+
655
689
REVOKE EXECUTEON FUNCTION pg_replication_origin_session_reset()FROM public;
690
+
656
691
REVOKE EXECUTEON FUNCTION pg_replication_origin_session_setup(text )FROM public;
692
+
657
693
REVOKE EXECUTEON FUNCTION pg_replication_origin_xact_reset()FROM public;
694
+
658
695
REVOKE EXECUTEON FUNCTION pg_replication_origin_xact_setup(pg_lsn,timestamp with time zone )FROM public;
696
+
659
697
REVOKE EXECUTEON FUNCTION pg_show_replication_origin_status()FROM public;
660
698
661
699
REVOKE EXECUTEON FUNCTION pg_stat_file(text )FROM public;
700
+
662
701
REVOKE EXECUTEON FUNCTION pg_stat_file(text ,boolean )FROM public;
663
702
664
703
REVOKE EXECUTEON FUNCTION pg_ls_dir(text )FROM public;
704
+
665
705
REVOKE EXECUTEON FUNCTION pg_ls_dir(text ,boolean ,boolean )FROM public;
666
706
667
707
--
668
708
-- We also set up some things as accessible to standard roles.
669
709
--
710
+
670
711
GRANT EXECUTEON FUNCTION pg_ls_logdir() TO pg_monitor;
712
+
671
713
GRANT EXECUTEON FUNCTION pg_ls_waldir() TO pg_monitor;
714
+
672
715
GRANT EXECUTEON FUNCTION pg_ls_archive_statusdir() TO pg_monitor;
716
+
673
717
GRANT EXECUTEON FUNCTION pg_ls_tmpdir() TO pg_monitor;
718
+
674
719
GRANT EXECUTEON FUNCTION pg_ls_tmpdir(oid ) TO pg_monitor;
675
720
676
721
GRANT pg_read_all_settings TO pg_monitor;
722
+
677
723
GRANT pg_read_all_stats TO pg_monitor;
724
+
678
725
GRANT pg_stat_scan_tables TO pg_monitor;