Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1psO6P-0007hN-J4 for pgsql-admin@arkaria.postgresql.org; Fri, 28 Apr 2023 13:25:33 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1psO6N-0005k4-FS for pgsql-admin@arkaria.postgresql.org; Fri, 28 Apr 2023 13:25:31 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1psO6M-0005hu-Q7 for pgsql-admin@lists.postgresql.org; Fri, 28 Apr 2023 13:25:31 +0000 Received: from mail-ua1-x930.google.com ([2607:f8b0:4864:20::930]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1psO6J-002MWH-QW for pgsql-admin@lists.postgresql.org; Fri, 28 Apr 2023 13:25:29 +0000 Received: by mail-ua1-x930.google.com with SMTP id a1e0cc1a2514c-773c30de3a4so3092478241.1 for ; Fri, 28 Apr 2023 06:25:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=joeconway.com; s=google; t=1682688326; x=1685280326; h=content-transfer-encoding:in-reply-to:from:content-language :references:cc:to:subject:user-agent:mime-version:date:message-id :from:to:cc:subject:date:message-id:reply-to; bh=290vfiQyD6xaQEGQf6Hu3szqDLi2kIACeuCX7unlmls=; b=kW/2vL5Ntzoc7zrSqWvpwI27oPEFoGA1R3BZBlbgVm2WdYMz7NqtPtxcN3rbUc/wh+ Gd23RMAUYmvX0/V/m1GmXbwasElVy7eyj2Asa7QeH8GXX9EAwZAr+rrJfY0WtHCndfu7 BgDIak+a8fova2MPuCSiLtEpTLry3wIYhunPYFjo4ofSxSZj/FgtLEG5lVSvFiBJbwdJ WSCYSF3aLJsNmW7EsE4x56+PAjmQQfTtAWjAIlQlxQfI/yKPt5H5Sr8z8zttdIdnLvi8 WfRdAPPIhcs3YHXEKSRrnxxMaHVzzQNzLim+0v+6O6EQF/1sWU9XygE+Ed/QIbFawXA0 Fs/A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1682688326; x=1685280326; h=content-transfer-encoding:in-reply-to:from:content-language :references:cc:to:subject:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=290vfiQyD6xaQEGQf6Hu3szqDLi2kIACeuCX7unlmls=; b=aHB8IN35wNpZ+nHAVwyHKcbKOuC6DwneiYDsS1bJaVSetM2qSc1sHSbLZL7nfZ6VmT UfdcM1rk++STXRlHzcKbi+DfEbCygVlH4KTOBZapEDc6ekXddxMhs7NGpJerX1alrFjP 0KLdJB+hfeuCqucMPlh6YIM2at5MN1DBqKhB8ZHTuczFRCBhp404ZU09k3dGz5uUOfCX ZIjxPifJihMP0VSQuQFXk6UTiIIQvonLXHMdGzt3MKd24OreoUfmvLMrpnSpjptNTAqD /0Mj2vtVX8HfBMGfWYUXRTuYVTVlzpCYSHHQnIsjkeAeq53JQZzj5UcGZwS+xHYApAGi 7ylw== X-Gm-Message-State: AC+VfDwn+vJ0LqbJ62fVGTKGDho7yg/ZffY3nkmqpqLfcAYjCFOvu7I2 tNe4TqpbgZ4Qn0aEbbpKUp1ilA== X-Google-Smtp-Source: ACHHUZ4/nis1k9EWUMSRQw+ktXMH3LiTxz/Izi90Qdp77TV+TiwjmVs2Hu/v/rOy5Row5Fe29U4MZg== X-Received: by 2002:a05:6102:3579:b0:42f:ec21:1c18 with SMTP id bh25-20020a056102357900b0042fec211c18mr2591300vsb.35.1682688326593; Fri, 28 Apr 2023 06:25:26 -0700 (PDT) Received: from [192.168.4.41] (189.sub-174-212-39.myvzw.com. [174.212.39.189]) by smtp.gmail.com with ESMTPSA id k30-20020a9f30de000000b00772182f4f6dsm3564197uab.3.2023.04.28.06.25.25 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Fri, 28 Apr 2023 06:25:26 -0700 (PDT) Message-ID: <4bb118ef-23c6-46e1-3938-91b660ff6047@joeconway.com> Date: Fri, 28 Apr 2023 09:25:24 -0400 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.10.0 Subject: Re: how to list privileges on the database object itself via SQL? To: richard coleman , Tom Lane Cc: pgsql-admin@lists.postgresql.org References: <870558.1682527243@sss.pgh.pa.us> <875041.1682529779@sss.pgh.pa.us> Content-Language: en-US From: Joe Conway In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On 4/26/23 13:50, richard coleman wrote: > Thanks for that.  It still seems rather weird that there isn't a more > straightforward way to get access to that information. Does this help? https://github.com/CrunchyData/crunchy_check_access For some examples of use: https://www.crunchydata.com/blog/postgresql-defaults-and-impact-on-security-part-1 -- Joe Conway PostgreSQL Contributors Team RDS Open Source Databases Amazon Web Services: https://aws.amazon.com