Date: Fri, 10 Feb 2023 12:04:49 +0100 (CET)
From: Erik Wienhold <ewie@ewie.name>
To: Manmeet Singh <manmeetsdba@gmail.com>, pgsql-admin@lists.postgresql.org
Message-ID: <880018050.326226.1676027089991@office.mailbox.org>
In-Reply-To: 
 <CANgqwXd6W9aZub+C-V9XCvLqh93NXb+SzwQ-9htH+fXg-eq3UA@mail.gmail.com>
References: 
 <CANgqwXd6W9aZub+C-V9XCvLqh93NXb+SzwQ-9htH+fXg-eq3UA@mail.gmail.com>
Subject: Re: Role Permission issue
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Importance: Normal
Archived-At: 
 <https://www.postgresql.org/message-id/880018050.326226.1676027089991%40office.mailbox.org>
Precedence: bulk

> On 10/02/2023 09:14 CET Manmeet Singh <manmeetsdba@gmail.com> wrote:
>
> We have created one role and assign the permission to that role for example:
> Select on all tables.
>
> Now i want to find out, what permissions we do have in this role..

The ACL is spread over multiple tables, depending on the object type:
https://www.postgresql.org/docs/15/ddl-priv.html#PRIVILEGES-SUMMARY-TABLE

You can search for specific roles using aclexplode and filtering on grantee:

	select relnamespace::regnamespace, relname, acl.*
	from pg_class, aclexplode(relacl) acl
	where acl.grantee = 'alice'::regrole

But you have to query each object type (pg_class, pg_proc, etc.) separately.

--
Erik