Received: from maia.hub.org (maia-5.hub.org [200.46.204.29]) by mail.postgresql.org (Postfix) with ESMTP id E0E711337FEF for ; Wed, 15 Sep 2010 13:29:54 -0300 (ADT) Received: from mail.postgresql.org ([200.46.204.86]) by maia.hub.org (mx1.hub.org [200.46.204.29]) (amavisd-maia, port 10024) with ESMTP id 67726-06 for ; Wed, 15 Sep 2010 16:29:49 +0000 (UTC) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from sss.pgh.pa.us (sss.pgh.pa.us [66.207.139.130]) by mail.postgresql.org (Postfix) with ESMTP id 6568B1337F97 for ; Wed, 15 Sep 2010 13:29:47 -0300 (ADT) Received: from sss2.sss.pgh.pa.us (tgl@localhost [127.0.0.1]) by sss.pgh.pa.us (8.14.2/8.14.2) with ESMTP id o8FGTgfC008017; Wed, 15 Sep 2010 12:29:43 -0400 (EDT) To: "Jan-Peter Seifert" cc: pgsql-admin@postgresql.org Subject: Re: information_schema.role_table_grants differs from relacl In-reply-to: <20100915155550.202140@gmx.net> References: <20100915155550.202140@gmx.net> Comments: In-reply-to "Jan-Peter Seifert" message dated "Wed, 15 Sep 2010 17:55:50 +0200" Date: Wed, 15 Sep 2010 12:29:42 -0400 Message-ID: <8016.1284568182@sss.pgh.pa.us> From: Tom Lane X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=-1.91 tagged_above=-10 required=5 tests=BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01 X-Spam-Level: X-Archive-Number: 201009/79 X-Sequence-Number: 35623 "Jan-Peter Seifert" writes: > there seems to be a difference between information_schema and pg_catalog when it comes to privileges. > pg_class and pgAdmin III show ACL = arwdDxt > pgAdmin III displays this as: > GRANT ALL ON TABLE blabla.tabelle TO benutzer; > However, information_schema.role_table_grants has is_grantable = YES for every privilege_type on this view for the user in question. > The user is owner of the view and also superuser. > So my question is: is is_grantable not the same as 'WITH GRANT OPTION'? An object's owner always has all grant options. By convention, this isn't explicitly represented in the acl array; rather it's hard-wired into the backend code behavior. There is some info about how to read acl values in the Notes section of the GRANT reference page. regards, tom lane