Обсуждение: information_schema.role_table_grants differs from relacl

Поиск
Список
Период
Сортировка

information_schema.role_table_grants differs from relacl

От
"Jan-Peter Seifert"
Дата:
Hello,

there seems to be a difference between information_schema and pg_catalog when it comes to privileges.

pg_class and pgAdmin III show ACL = arwdDxt

pgAdmin III displays this as:
GRANT ALL ON TABLE blabla.tabelle TO benutzer;

However, information_schema.role_table_grants has is_grantable = YES for every privilege_type on this view for the user
inquestion. 

The user is owner of the view and also superuser.

So my question is: is is_grantable not the same as 'WITH GRANT OPTION'?

Could you tell me, please?

Thank you very much,

Peter

P.S. Server version is PostgreSQL 8.4.3 on x86_64-unknown-linux-gnu, compiled by GCC gcc (GCC) 3.3.3 (SuSE Linux),
64-bit
--
GRATIS: Spider-Man 1-3 sowie 300 weitere Videos!
Jetzt freischalten! http://portal.gmx.net/de/go/maxdome

Re: information_schema.role_table_grants differs from relacl

От
Tom Lane
Дата:
"Jan-Peter Seifert" <Jan-Peter.Seifert@gmx.de> writes:
> there seems to be a difference between information_schema and pg_catalog when it comes to privileges.

> pg_class and pgAdmin III show ACL = arwdDxt

> pgAdmin III displays this as:
> GRANT ALL ON TABLE blabla.tabelle TO benutzer;

> However, information_schema.role_table_grants has is_grantable = YES for every privilege_type on this view for the
userin question. 

> The user is owner of the view and also superuser.

> So my question is: is is_grantable not the same as 'WITH GRANT OPTION'?

An object's owner always has all grant options.  By convention, this
isn't explicitly represented in the acl array; rather it's hard-wired
into the backend code behavior.  There is some info about how to read
acl values in the Notes section of the GRANT reference page.

            regards, tom lane