Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1ptKrW-0003Gg-14 for pgsql-admin@arkaria.postgresql.org; Mon, 01 May 2023 04:10:06 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1ptKrU-0003HF-To for pgsql-admin@arkaria.postgresql.org; Mon, 01 May 2023 04:10:04 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1ptKrU-0003Gt-ES for pgsql-admin@lists.postgresql.org; Mon, 01 May 2023 04:10:04 +0000 Received: from mail-ej1-x62f.google.com ([2a00:1450:4864:20::62f]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1ptKrQ-002oPO-B9 for pgsql-admin@lists.postgresql.org; Mon, 01 May 2023 04:10:03 +0000 Received: by mail-ej1-x62f.google.com with SMTP id a640c23a62f3a-956ff2399c9so430355366b.3 for ; Sun, 30 Apr 2023 21:10:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cybertec-at.20221208.gappssmtp.com; s=20221208; t=1682914198; x=1685506198; h=mime-version:user-agent:content-transfer-encoding:references :in-reply-to:date:cc:to:from:subject:message-id:from:to:cc:subject :date:message-id:reply-to; bh=b6bdgV7mlZ9XJUGMhcyk2up+xhF4e31fE7IASW2VQdI=; b=GDDoFWs1Jn5kcBYBEETGjUCFTjlk8OofIUO2k2nmsJ1tCbmHb92/vpK5CrWP4Bnw0Y Vwt/GovIBvfH8vud6lDYg9Ft76099bZbYQVN10r7wUah9fxOM62cfvt6Lc3u73mvv3Lu QNBkyJYpWZS+TEWG9L7ozzTcpegOdFKiUjvGFfPkNhSUG58A0EiYiEQ3h0a458SRoRo3 c0nAd4A3+YfpIzY7U64zup247yuT5G30Z8YFgPoMtG3KW0+AB4bsll3xY8qFlT70Z2NX fAZnEoVz0VFpLbrtwqGrdFLnKFQ0ySFDKEO5cUnIiX1ZxwjOdrnt+W+yCzAXHssWnls8 EBuQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1682914198; x=1685506198; h=mime-version:user-agent:content-transfer-encoding:references :in-reply-to:date:cc:to:from:subject:message-id:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=b6bdgV7mlZ9XJUGMhcyk2up+xhF4e31fE7IASW2VQdI=; b=a38HuF8ggzS0IoDcsdBT2QfzwfMGNor4sz0NRIVaEpvlgKLeCRQQCkM4AwUxYYW0lg xLKVgBywks+Kbi+CFKYgSnD4pIeaOvg6toWFQkmzjoLLcRM8ksUkmxhadEoKvAqQ6yfq K5wE0mMZHaxouYzT/ecStajUwF6w9sOP/bOwEess7eJHPYMPT4LpCgfFJoo6kmF56mC7 MJxtWaNFPja6cy+22qMDNpXWc8CRvhp7vNSFt7fkvuJenQ1PMC3fQmsmsmbOTugLos4v Sq1XOoUEuckShy2/K8xZlkmAVznABBAA3a3AWYPwHA7ye1E+6zQ87V+YdgUDsTaSekoT xD+A== X-Gm-Message-State: AC+VfDwxrUzSsqlLsqaNiG1CgPYXT2+x5PSVGwTN8cYxdTxX+NTA8/w+ Mgbz20Z6ee5tQMaLDBuN8AzKhA== X-Google-Smtp-Source: ACHHUZ7cPqYm+62VnAytSxo6BWCvpdiiI0s3GOSQFuhV7txTqHA/58w8XYq+FwDMTc0iNVtl0CVGFw== X-Received: by 2002:a17:907:930a:b0:94f:704d:a486 with SMTP id bu10-20020a170907930a00b0094f704da486mr12654681ejc.32.1682914198586; Sun, 30 Apr 2023 21:09:58 -0700 (PDT) Received: from localhost.localdomain (62-46-253-209.adsl.highway.telekom.at. [62.46.253.209]) by smtp.gmail.com with ESMTPSA id g23-20020a170906395700b0094f16a3ea9csm14237616eje.117.2023.04.30.21.09.57 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 30 Apr 2023 21:09:58 -0700 (PDT) Message-ID: Subject: Re: how to list privileges on the database object itself via SQL? From: Laurenz Albe To: Joe Conway , richard coleman , Tom Lane Cc: pgsql-admin@lists.postgresql.org Date: Mon, 01 May 2023 06:09:57 +0200 In-Reply-To: <4bb118ef-23c6-46e1-3938-91b660ff6047@joeconway.com> References: <870558.1682527243@sss.pgh.pa.us> <875041.1682529779@sss.pgh.pa.us> <4bb118ef-23c6-46e1-3938-91b660ff6047@joeconway.com> Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable User-Agent: Evolution 3.46.4 (3.46.4-1.fc37) MIME-Version: 1.0 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Fri, 2023-04-28 at 09:25 -0400, Joe Conway wrote: > On 4/26/23 13:50, richard coleman wrote: > > Thanks for that.=C2=A0 It still seems rather weird that there isn't a m= ore=20 > > straightforward way to get access to that information. >=20 > Does this help? >=20 > https://github.com/CrunchyData/crunchy_check_access >=20 > For some examples of use: > https://www.crunchydata.com/blog/postgresql-defaults-and-impact-on-securi= ty-part-1 There is also pg_permissions: https://github.com/cybertec-postgresql/pg_permissions Yours, Laurenz Albe