X-Original-To: pgsql-interfaces-postgresql.org@localhost.postgresql.org Received: from localhost (unknown [200.46.204.144]) by svr1.postgresql.org (Postfix) with ESMTP id 0579656381 for ; Sun, 20 Mar 2005 17:02:40 +0000 (GMT) Received: from svr1.postgresql.org ([200.46.204.71]) by localhost (av.hub.org [200.46.204.144]) (amavisd-new, port 10024) with ESMTP id 26204-04 for ; Sun, 20 Mar 2005 17:02:34 +0000 (GMT) Received: from tigger.fuhr.org (tigger.fuhr.org [63.214.45.158]) by svr1.postgresql.org (Postfix) with ESMTP id 7F5545638D for ; Sun, 20 Mar 2005 17:02:33 +0000 (GMT) Received: from winnie.fuhr.org (winnie.fuhr.org [10.1.0.1]) by tigger.fuhr.org (8.13.3/8.13.3) with ESMTP id j2KH2TYs028729 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Sun, 20 Mar 2005 10:02:31 -0700 (MST) (envelope-from mfuhr@winnie.fuhr.org) Received: from winnie.fuhr.org (localhost [127.0.0.1]) by winnie.fuhr.org (8.13.3/8.13.3) with ESMTP id j2KH2S5d019262; Sun, 20 Mar 2005 10:02:28 -0700 (MST) (envelope-from mfuhr@winnie.fuhr.org) Received: (from mfuhr@localhost) by winnie.fuhr.org (8.13.3/8.13.3/Submit) id j2KH2SsH019261; Sun, 20 Mar 2005 10:02:28 -0700 (MST) (envelope-from mfuhr) Date: Sun, 20 Mar 2005 10:02:28 -0700 From: Michael Fuhr To: Murray Cumming Cc: pgsql-interfaces Subject: Re: Discovering privileges Message-ID: <20050320170228.GA19192@winnie.fuhr.org> References: <1088799354.3319.110.camel@murrayc_debian> <1111330231.5820.4.camel@localhost.localdomain> <20050320154247.GA18843@winnie.fuhr.org> <1111337130.5820.7.camel@localhost.localdomain> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <1111337130.5820.7.camel@localhost.localdomain> X-Virus-Scanned: by amavisd-new at hub.org X-Spam-Status: No, hits=0.004 tagged_above=0 required=5 tests=AWL X-Spam-Level: X-Archive-Number: 200503/56 X-Sequence-Number: 5385 On Sun, Mar 20, 2005 at 05:45:29PM +0100, Murray Cumming wrote: > On Sun, 2005-03-20 at 08:42 -0700, Michael Fuhr wrote: > > > > You could look at pg_class.relacl, > > I can't make much sense of that so far. Ca you give any clues on how > that works? See "Notes" in the GRANT documentation: http://www.postgresql.org/docs/8.0/interactive/sql-grant.html > > but the "Access Privilege Inquiry > > Functions" (has_table_privilege(), etc.) might be easier to use. > > > > http://www.postgresql.org/docs/8.0/interactive/functions-info.html#FUNCTIONS-INFO-ACCESS-TABLE > > Interesting. Is there anything like that for a group instead of a user? > I'm most interested in privileges of a group. Hmmm...not sure. I suppose you could create a user that belongs only to a particular group and check that user's privileges. -- Michael Fuhr http://www.fuhr.org/~mfuhr/