pg.ddx.io pgsql-admin@postgresql.org mailing list archivehelp / color / mirror / Atom feed
information_schema.role_table_grants differs from relacl 2+ messages / 2 participants [nested] [flat]
* information_schema.role_table_grants differs from relacl @ 2010-09-15 15:55 Jan-Peter Seifert <Jan-Peter.Seifert@gmx.de> 2010-09-15 16:29 ` Re: information_schema.role_table_grants differs from relacl Tom Lane <tgl@sss.pgh.pa.us> 0 siblings, 1 reply; 2+ messages in thread From: Jan-Peter Seifert @ 2010-09-15 15:55 UTC (permalink / raw) To: pgsql-admin Hello, there seems to be a difference between information_schema and pg_catalog when it comes to privileges. pg_class and pgAdmin III show ACL = arwdDxt pgAdmin III displays this as: GRANT ALL ON TABLE blabla.tabelle TO benutzer; However, information_schema.role_table_grants has is_grantable = YES for every privilege_type on this view for the user in question. The user is owner of the view and also superuser. So my question is: is is_grantable not the same as 'WITH GRANT OPTION'? Could you tell me, please? Thank you very much, Peter P.S. Server version is PostgreSQL 8.4.3 on x86_64-unknown-linux-gnu, compiled by GCC gcc (GCC) 3.3.3 (SuSE Linux), 64-bit -- GRATIS: Spider-Man 1-3 sowie 300 weitere Videos! Jetzt freischalten! http://portal.gmx.net/de/go/maxdome ^ permalink raw reply [nested|flat] 2+ messages in thread
* Re: information_schema.role_table_grants differs from relacl 2010-09-15 15:55 information_schema.role_table_grants differs from relacl Jan-Peter Seifert <Jan-Peter.Seifert@gmx.de> @ 2010-09-15 16:29 ` Tom Lane <tgl@sss.pgh.pa.us> 0 siblings, 0 replies; 2+ messages in thread From: Tom Lane @ 2010-09-15 16:29 UTC (permalink / raw) To: Jan-Peter Seifert <Jan-Peter.Seifert@gmx.de>; +Cc: pgsql-admin "Jan-Peter Seifert" <Jan-Peter.Seifert@gmx.de> writes: > there seems to be a difference between information_schema and pg_catalog when it comes to privileges. > pg_class and pgAdmin III show ACL = arwdDxt > pgAdmin III displays this as: > GRANT ALL ON TABLE blabla.tabelle TO benutzer; > However, information_schema.role_table_grants has is_grantable = YES for every privilege_type on this view for the user in question. > The user is owner of the view and also superuser. > So my question is: is is_grantable not the same as 'WITH GRANT OPTION'? An object's owner always has all grant options. By convention, this isn't explicitly represented in the acl array; rather it's hard-wired into the backend code behavior. There is some info about how to read acl values in the Notes section of the GRANT reference page. regards, tom lane ^ permalink raw reply [nested|flat] 2+ messages in thread
end of thread, other threads:[~2010-09-15 16:29 UTC | newest] Thread overview: 2+ messages (download: mbox mbox.gz follow: Atom feed) -- links below jump to the message on this page -- 2010-09-15 15:55 information_schema.role_table_grants differs from relacl Jan-Peter Seifert <Jan-Peter.Seifert@gmx.de> 2010-09-15 16:29 ` Tom Lane <tgl@sss.pgh.pa.us>
This inbox is served by DDX for PostgreSQL; see mirroring instructions for how to clone and mirror all data and code used for this inbox