Re: information_schema.role_table_grants differs from relacl - Mailing list pgsql-admin

From Tom Lane
Subject Re: information_schema.role_table_grants differs from relacl
Date
Msg-id 8016.1284568182@sss.pgh.pa.us
Whole thread Raw
In response to information_schema.role_table_grants differs from relacl  ("Jan-Peter Seifert" <Jan-Peter.Seifert@gmx.de>)
List pgsql-admin
"Jan-Peter Seifert" <Jan-Peter.Seifert@gmx.de> writes:
> there seems to be a difference between information_schema and pg_catalog when it comes to privileges.

> pg_class and pgAdmin III show ACL = arwdDxt

> pgAdmin III displays this as:
> GRANT ALL ON TABLE blabla.tabelle TO benutzer;

> However, information_schema.role_table_grants has is_grantable = YES for every privilege_type on this view for the
userin question. 

> The user is owner of the view and also superuser.

> So my question is: is is_grantable not the same as 'WITH GRANT OPTION'?

An object's owner always has all grant options.  By convention, this
isn't explicitly represented in the acl array; rather it's hard-wired
into the backend code behavior.  There is some info about how to read
acl values in the Notes section of the GRANT reference page.

            regards, tom lane

pgsql-admin by date:

Previous
From: "Jan-Peter Seifert"
Date:
Subject: information_schema.role_table_grants differs from relacl
Next
From: Mark Rostron
Date:
Subject: can you change pg_hba.conf and restart the listener on the fly?