Inspect function privileges

schemainspect/pg/sql/privileges.sql

@@ -13,4 +13,19 @@ where grantee != (
 )
 -- SKIP_INTERNAL and table_schema not in ('pg_internal', 'pg_catalog', 'information_schema', 'pg_toast')
 -- SKIP_INTERNAL and table_schema not like 'pg_temp_%' and table_schema not like 'pg_toast_temp_%'
-order by schema, name, user;
+union
+select
+  routine_schema as schema,
+  routine_name as name,
+  'function' as object_type,
+  grantee as user,
+  privilege_type as privilege
+from information_schema.role_routine_grants
+where grantee != (
+    select datdba::regrole::text
+    from pg_database
+    where datname = current_database()
+)
+-- SKIP_INTERNAL and routine_schema not in ('pg_internal', 'pg_catalog', 'information_schema', 'pg_toast')
+-- SKIP_INTERNAL and routine_schema not like 'pg_temp_%' and routine_schema not like 'pg_toast_temp_%'
+order by schema, name, "user";

tests/test_all.py

@@ -234,6 +234,14 @@ def setup_pg_schema(s):
     s.execute("comment on table emptytable is 'emptytable comment'")
     s.execute("create extension pg_trgm")
     s.execute("create schema otherschema")
+    s.execute(
+        """DO $$
+BEGIN
+CREATE ROLE testuser;
+EXCEPTION WHEN duplicate_object THEN RAISE NOTICE '%, skipping', SQLERRM USING ERRCODE = SQLSTATE;
+END
+$$;"""
+    )
     s.execute(
         """
         CREATE TABLE films (
@@ -267,6 +275,7 @@ def setup_pg_schema(s):
             )
             as $$select 'a'::varchar, '2014-01-01'::date$$
             language sql;
+            grant execute on function films_f(date, text, date) to testuser;
         """
     )
     s.execute("comment on function films_f(date, text, date) is 'films_f comment'")
@@ -446,13 +455,14 @@ def asserts_pg(i, has_timescale=False):
     assert n("films_title_idx") in t.indexes
 
     # privileges
-    g = InspectedPrivilege("table", "public", "films", "select", "postgres")
+    f_films_f = n("films_f")
+    g = InspectedPrivilege("function", "public", "films_f", "execute", "testuser")
     g = i.privileges[g.key]
-    assert g.create_statement == 'grant select on table {} to "postgres";'.format(
-        t_films
+    assert g.create_statement == 'grant execute on function {} to "testuser";'.format(
+        f_films_f
     )
-    assert g.drop_statement == 'revoke select on table {} from "postgres";'.format(
-        t_films
+    assert g.drop_statement == 'revoke execute on function {} from "testuser";'.format(
+        f_films_f
     )
 
     # composite types