Re: Re: double check the role has what's kind of the privilege? And the same for the objects. Thanks.

From: "Albe Laurenz" <laurenz(dot)albe(at)wien(dot)gv(dot)at>
To: "Tom Lane *EXTERN*" <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: "leaf_yxj *EXTERN*" <leaf_yxj(at)163(dot)com>, <pgsql-general(at)postgresql(dot)org>
Subject: Re: Re: double check the role has what's kind of the privilege? And the same for the objects. Thanks.
Date: 2012-03-30 14:26:03
Message-ID: D960CB61B694CF459DCFB4B0128514C207B2C293@exadv11.host.magwien.gv.at
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Tom Lane wrote:
>>> My bosses ask me to list all the users and all the privilege which
>> the superuser granted to the
>>> users.
>>> Then they can double check that I did right thing or not?
>
>> Unlike Oracle, PostgreSQL does not have a concept of "grantor",
>> so it is not possible to find out which privileges were granted
>> by a superuser.
>
> Um, we *do* have a concept of grantors, and that information is
> recorded. However, in Postgres any grant or revoke executed by
> a superuser is treated as having been done by the object's owner,
> so what gets recorded as the grantor in such a case is the owner.
> So, right answer, wrong reasoning.

Oops, you're right of course. Sorry for causing confusion.

Yours,
Laurenz Albe

In response to

Browse pgsql-general by date

  From Date Subject
Next Message leaf_yxj 2012-03-30 14:28:26 Re: double check the role has what's kind of the privilege? And the same for the objects. Thanks.
Previous Message leaf_yxj 2012-03-30 14:23:57 Re: how to pass the function caller's parameter to inside the function. syntax error at or near "$1"