Further, I seem to have a similar problem with the EXECUTE check
requirement as well.
Sample SQL given below.

BEGIN TRANSACTION;
CREATE ROLE rol_op3;
CREATE TYPE type_op3 AS ENUM ('new', 'open', 'closed');
CREATE FUNCTION fn_op3(type_op3, type_op3)
RETURNS type_op3 AS $$
    SELECT NULL::type_op3;
$$ LANGUAGE sql IMMUTABLE;
REVOKE EXECUTE ON FUNCTION fn_op3(type_op3, type_op3) FROM rol_op3;
SET ROLE rol_op3;
CREATE OPERATOR #*# (
   leftarg = type_op3,
   rightarg = type_op3,
   procedure = fn_op3
);
RESET ROLE;
ROLLBACK;

Thanks.

--
Robins Tharakan


On 22 May 2013 05:50, Robins Tharakan <thara...@gmail.com> wrote:

> Hi,
>
> While trying to create regression tests for CREATE OPERATOR, I am able to
> create an operator despite not have USAGE / ALL access to the given
> argument type. Shouldn't the following SQL throw an error?
>
> BEGIN TRANSACTION;
> CREATE ROLE rol_op3;
> CREATE TYPE type_op3 AS ENUM ('new', 'open', 'closed');
> CREATE FUNCTION fn_op3(type_op3, type_op3)
> RETURNS type_op3 AS $$
>     SELECT NULL::type_op3;
> $$ LANGUAGE sql IMMUTABLE;
> REVOKE ALL ON TYPE type_op3 FROM rol_op3;
> SET ROLE rol_op3;
> CREATE OPERATOR #*# (
>    leftarg = type_op3,
>    rightarg = type_op3,
>    procedure = fn_op3
> );
> RESET ROLE;
> ROLLBACK;
>
> This what the doc says:
>
> > To be able to create an operator, you must have USAGE privilege on the
> argument types and the return type, as well as EXECUTE privilege on the
> underlying function. If a commutator or negator operator is specified, you
> must own these operators.
>
> Any pointers would be helpful.
>
> Thanks
> --
> Robins Tharakan
>

Reply via email to