Re: sql user management

On Mon, 28 May 2001 17:03:32 +0300
Vladislav Breus <vlad(at)dtr(dot)donetsk(dot)ua> wrote:

> With SQL requests I can create, change privileges of the user...
>
> Can I access to user information only with sql-requests ?
> - Is the user a member of group <group> ?

Use the contrib module 'array':
[cd $SOURCE/contrib/array
make
make install]

Then, to find what groups 'young' is in, one can do:
select g.groname from pg_group g, pg_shadow s where s.usename='young' and g.grolist *= s.usesysid;

or

select g.grolist *= s.usesysid from pg_group g, pg_shadow s where s.usename='young' and g.groname='originator';

just to see wether or not 'young' is in group 'originator'.

> - Has he rights to table <table> ?
That's more complicated, but still accessible. You have to get pg_class.relacl from pg_class where relname='yourtable';
and then parse the acl (access control list) and join with pg_group info...
Hmm, I haven't tried it -- looks messy...

Good luck,
George
--
Your mouse has moved.
Windows NT must be restarted for the change to take effect.
Reboot now? [OK]