Message-ID: <ba8f5e0596fbe18cf901d74de5879bc8ca85b436.camel@cybertec.at>
Subject: Re: Clarification on Role Access Rights to Table Indexes
From: Laurenz Albe <laurenz.albe@cybertec.at>
To: Ayush Vatsa <ayushvatsa1810@gmail.com>, 
	pgsql-general@lists.postgresql.org
Date: Mon, 17 Feb 2025 20:58:49 +0100
In-Reply-To: <CACX+KaMz2ZoOojh0nQ6QNBYx8Ak1Dkoko=D4FSb80BYW+o8CHQ@mail.gmail.com>
References: 
	<CACX+KaMz2ZoOojh0nQ6QNBYx8Ak1Dkoko=D4FSb80BYW+o8CHQ@mail.gmail.com>
User-Agent: Evolution 3.54.3 (3.54.3-1.fc41) 
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://www.postgresql.org/message-id/ba8f5e0596fbe18cf901d74de5879bc8ca85b436.camel%40cybertec.at>
Precedence: bulk

On Mon, 2025-02-17 at 23:31 +0530, Ayush Vatsa wrote:
> postgres=3D> SELECT pg_prewarm('pg_class_oid_index');
> ERROR: =C2=A0permission denied for index pg_class_oid_index
> postgres=3D> RESET ROLE;
> RESET
>=20
> postgres=3D# GRANT SELECT ON pg_class_oid_index TO alpha;
> ERROR: =C2=A0"pg_class_oid_index" is an index
> Based on this, I have=C2=A0few questions:
> 1. Can a role have access rights to a table without having access to its =
index?
> 2. If yes, how can we explicitly grant access to the index?
> 3. If no, and the role inherently gets access to the index when granted a=
ccess to the table, why
> does the pg_prewarm call fail [1] in the above scenario?

I have seen a complaint about this bug before:
https://dba.stackexchange.com/a/344603/176905

Yours,
Laurenz Albe

--=20

*E-Mail Disclaimer*
Der Inhalt dieser E-Mail ist ausschliesslich fuer den=20
bezeichneten Adressaten bestimmt. Wenn Sie nicht der vorgesehene Adressat=
=20
dieser E-Mail oder dessen Vertreter sein sollten, so beachten Sie bitte,=20
dass jede Form der Kenntnisnahme, Veroeffentlichung, Vervielfaeltigung oder=
=20
Weitergabe des Inhalts dieser E-Mail unzulaessig ist. Wir bitten Sie, sich=
=20
in diesem Fall mit dem Absender der E-Mail in Verbindung zu setzen.

*CONFIDENTIALITY NOTICE & DISCLAIMER
*This message and any attachment are=20
confidential and may be privileged or otherwise protected from disclosure=
=20
and solely for the use of the person(s) or entity to whom it is intended.=
=20
If you have received this message in error and are not the intended=20
recipient, please notify the sender immediately and delete this message and=
=20
any attachment from your system. If you are not the intended recipient, be=
=20
advised that any use of this message is prohibited and may be unlawful, and=
=20
you must not copy this message or attachment or disclose the contents to=20
any other person.