From: Tom Lane <tgl@sss.pgh.pa.us>
To: Jan-Peter Seifert <Jan-Peter.Seifert@gmx.de>
Cc: pgsql-admin@postgresql.org
Subject: Re: information_schema.role_table_grants differs from relacl
Date: Wed, 15 Sep 2010 12:29:42 -0400
Message-ID: <8016.1284568182@sss.pgh.pa.us> (raw)
In-Reply-To: <20100915155550.202140@gmx.net>
References: <20100915155550.202140@gmx.net>
"Jan-Peter Seifert" <Jan-Peter.Seifert@gmx.de> writes:
> there seems to be a difference between information_schema and pg_catalog when it comes to privileges.
> pg_class and pgAdmin III show ACL = arwdDxt
> pgAdmin III displays this as:
> GRANT ALL ON TABLE blabla.tabelle TO benutzer;
> However, information_schema.role_table_grants has is_grantable = YES for every privilege_type on this view for the user in question.
> The user is owner of the view and also superuser.
> So my question is: is is_grantable not the same as 'WITH GRANT OPTION'?
An object's owner always has all grant options. By convention, this
isn't explicitly represented in the acl array; rather it's hard-wired
into the backend code behavior. There is some info about how to read
acl values in the Notes section of the GRANT reference page.
regards, tom lane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: tgl@sss.pgh.pa.us, Jan-Peter.Seifert@gmx.de
Subject: Re: information_schema.role_table_grants differs from relacl
In-Reply-To: <8016.1284568182@sss.pgh.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox