role_table_grants only shows grantees that are "groups"?

From: PG Doc comments form <noreply(at)postgresql(dot)org>
To: pgsql-docs(at)lists(dot)postgresql(dot)org
Cc: horse-sheep-goat(at)protonmail(dot)com
Subject: role_table_grants only shows grantees that are "groups"?
Date: 2022-01-04 17:00:53
Message-ID: 164131565365.21667.16084584192723027315@wrigleys.postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-docs

The following documentation comment has been logged on the website:

Page: https://www.postgresql.org/docs/13/infoschema-role-table-grants.html
Description:

It seems like the "grantee" column in this table is only ever a "group", not
just roles in general as the documentation seems to say. I know there's not
supposed to be any distinction between users/groups/roles anymore, but, for
some reason this table doesn't list any roles that are assigned to
individuals or that have logins.

test_dw=> SELECT grantee, count(1) FROM information_schema.role_table_grants
GROUP BY 1;
grantee | count
--------------+-------
analytics | 704
product | 144
underwriting | 92
(3 rows)

test_dw=> SELECT md5(grantor), count(1) FROM
information_schema.role_table_grants GROUP BY 1;
md5 | count
----------------------------------+-------
20212be24a1ee5e5a2a76a6bf6c9a685 | 3
3672351fd359e8c9198a56d9b45b6d41 | 10
51a1bc84390d0a7db9352f7e158764f7 | 10
68c4283db8074b12df1660b31c0220a9 | 22
8570bee3f494838885fe1866c210a29e | 1
87d2b323c79e710dbdc747a37dbcc94f | 5
8bfbfe8c656224a77631c5d102736463 | 1
94e42f20f83a9404506fb83f2e5efc88 | 3
bd82c4d557f634b7401bcdbfeba70227 | 5
d258b2c73904a84296ff266d4e243a04 | 11
d92d63c81d6212f11c5d6bc26d4e198b | 867
e2818a77f885d2c6d74fd7544295b7e3 | 2
(12 rows)

All but 22 of the hundreds of grantors correspond to an individual with a
login.

I can see there are grants to individuals using psql's "\z" command or
relacl in pg_class. Should they show up in this table? Or is it not
sufficient to just be a "currently enabled role" as the docs say?

Browse pgsql-docs by date

  From Date Subject
Next Message PG Doc comments form 2022-01-04 18:11:48 pg_isready docs doesn't specify what exactly it is checking
Previous Message Jonathan S. Katz 2022-01-04 14:27:11 Re: Add TypeScript driver