Hey All-
It seems like there should be an easily-found answer to this, but if
there is, I can't find it.
I am simply trying to drop a role.
So, before dropping it I need to reassign all its owned objects
(REASSIGN OWNED, very handy) and then revoke all privilges it has had
assigned to it. The revoking privileges is the hard part. (And why this
requirement?) I can (and have been) explicitly revoking all privileges
on each database object first, but that's a lot of unneccessary work
(and time... it's done programatically though, of course).
I've been looking into using the function aclcontains() in conjunction
with the table pg_class, in order to determine which objects a role has
been granted privilges to. And while this seems promising, I'm still not
having any luck formulating the sql to get me the answer to: "What
objects has role x been granted specific rights to?"
We are using 8.2.
Any help is much appreciated.
Regards,
-Tom D