From: Tom Lane <tgl@sss.pgh.pa.us>
To: richard coleman <rcoleman.ascentgl@gmail.com>
Cc: pgsql-admin@lists.postgresql.org
Subject: Re: how to list privileges on the database object itself via SQL?
Date: Wed, 26 Apr 2023 14:05:01 -0400
Message-ID: <880086.1682532301@sss.pgh.pa.us> (raw)
In-Reply-To: <CAGA3vBsPQ8672wf99EGGWDAG4GBTcOpiJeCrJOypQ1sGG02Bvw@mail.gmail.com>
References: <CAGA3vBvanu7UBtaaVv9PH25Ko==5F2wewhPWTTra8wqexdDAdQ@mail.gmail.com>
<870558.1682527243@sss.pgh.pa.us>
<CAGA3vBvjUiUb+O-UWYU8VNrrPrLrwz+KOg3zqwiWTAAkTChX_A@mail.gmail.com>
<875041.1682529779@sss.pgh.pa.us>
<CAGA3vBsPQ8672wf99EGGWDAG4GBTcOpiJeCrJOypQ1sGG02Bvw@mail.gmail.com>
richard coleman <rcoleman.ascentgl@gmail.com> writes:
> Thanks for that. It still seems rather weird that there isn't a more
> straightforward way to get access to that information.
You could just read the system catalog documentation:
https://www.postgresql.org/docs/current/catalogs.html
psql's queries are mostly useful as a shortcut to finding out
where to look.
> Also the SQL generated by psql -E doesn't seem to work on earlier versions
> of PostgreSQL:
Yeah, you'd need to try it against a server of the vintage you
care about. (Also read the documentation of the correct version.)
> Are you saying that the only place this information is stored
> is in an array in the datacl column of the pg_catalog.pg_database table?
Precisely.
> If that's the case then I am going to be forced to either write code to
> parse out that array, or write a looping union of multiple
> "has_database_privilege()" calls.
You were already pointed at aclexplode(), which might help.
select datname, a.* from pg_database, aclexplode(datacl) a;
regards, tom lane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: tgl@sss.pgh.pa.us, rcoleman.ascentgl@gmail.com, pgsql-admin@lists.postgresql.org
Subject: Re: how to list privileges on the database object itself via SQL?
In-Reply-To: <880086.1682532301@sss.pgh.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox