Add ALTER FUNCTION ... SET AUTHORIZATION

[homar]

Trino already supports SET AUTHORIZATION fors schemas, tables and views.
It is missing for functions so I propose to add it with following syntax:

ALTER FUNCTION function_name SET AUTHORIZATION ( user | USER user | ROLE role )

[kokosing]

To me this syntax is reasonable. It follows the similar syntax that we have for tables, views and schema. I also understand that the similar access control checks will need to be also implemented to those we have today.

@martint are you ok with this syntax?

[findinpath]

cc @djsstarburst

[mosabua]

Sounds reasonable to get started .. however I think if we engage on that work, we can't just stop there. We should flesh out all the syntax we want to support in a roadmap item (maybe this one) and then start implementing whatever we need first.

[homar]

Sounds reasonable to get started .. however I think if we engage on that work, we can't just stop there. We should flesh out all the syntax we want to support in a roadmap item (maybe this one) and then start implementing whatever we need first.

@mosabua I created more general ticket here: #25042

[djsagain]

I have this PR that adds generic SET AUTHORIZATION, in a similar way that I added generic GRANT/DENY/REVOKE. @martint looked at it early on, and @dain went a couple of cycles reviewing it right before Christmas. I expected him to merge the PR, but I think he had other things on his mind ☹

I'll ping him again.

[dain]

I was just thinking "I swear striker already added code for this". I'll take a look at the PR again

[homar]

@djsstarburst do you also plan to implement a way to retrieve information about ownership ? I may be wrong but it seems that currently it is not possible

[djsagain]

@djsstarburst do you also plan to implement a way to retrieve information about ownership ? I may be wrong but it seems that currently it is not possible

Well now that's an excellent point! I'll raise the question in the PR.