postgresql_passchanger_func.../grants_to_grant.sql


-- grant usage for schema dba
grant usage on schema dba to dodger ;

-- grant execute on the function change_my_password
grant execute on function dba.change_my_password(text) to dodger;
-- grant execute on the function change_valid_until
grant execute on function dba.change_valid_until(text, text) to dodger;

-- only insert is needed to allow audit trace
GRANT INSERT ON TABLE dba.pwdhistory TO dodger;


-- SET SESSION AUTORIZATION dodger ;
Changed the whole thing, now it really works There are 2 functions, one with "SECURITY INVOKER" and the other with "SECURITY DEFINER". One is to be invoked by the final user and the other one only for the main function. 2022-01-05 10:06:33 +00:00
			`-- grant usage for schema dba`
			`grant usage on schema dba to dodger ;`

grant on change_valid_until 2022-01-05 12:13:27 +00:00			`-- grant execute on the function change_my_password`
Changed the whole thing, now it really works There are 2 functions, one with "SECURITY INVOKER" and the other with "SECURITY DEFINER". One is to be invoked by the final user and the other one only for the main function. 2022-01-05 10:06:33 +00:00			`grant execute on function dba.change_my_password(text) to dodger;`
grant on change_valid_until 2022-01-05 12:13:27 +00:00			`-- grant execute on the function change_valid_until`
working for rds must be cleaned 2022-05-06 15:52:04 +00:00			`grant execute on function dba.change_valid_until(text, text) to dodger;`
function working 2022-01-04 17:46:37 +00:00
			`-- only insert is needed to allow audit trace`
			`GRANT INSERT ON TABLE dba.pwdhistory TO dodger;`

working for rds must be cleaned 2022-05-06 15:52:04 +00:00

			`-- SET SESSION AUTORIZATION dodger ;`