Re: Backing out of privilege grants rabbit hole

From: Adrian Klaver <adrian(dot)klaver(at)aklaver(dot)com>
To: AC Gomez <antklc(at)gmail(dot)com>, raf <raf(at)raf(dot)org>
Cc: pgsql-general(at)lists(dot)postgresql(dot)org
Subject: Re: Backing out of privilege grants rabbit hole
Date: 2020-04-03 17:23:57
Message-ID: b02e4d77-0ce4-7283-5200-0ac61c7f38ed@aklaver.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On 4/3/20 10:18 AM, Adrian Klaver wrote:
> On 4/2/20 9:59 PM, AC Gomez wrote:
>> Granted. But we are where we are, so I'm assuming this is going to be
>> hand to hand combat.
>
> Well you could even the odds somewhat by using the below as a starting
> point:
>
>
> SELECT
>     relname,
>     pg_roles.rolname,
>     acl.*
> FROM
>     pg_class,
>     aclexplode(relacl) AS acl
>     JOIN pg_roles ON acl.grantee = pg_roles.oid
> WHERE
>     pg_roles.oid = 'some_role'::regrole;
>

Possible flaw in plan, the above only works with v12+.

--
Adrian Klaver
adrian(dot)klaver(at)aklaver(dot)com

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message AC Gomez 2020-04-03 17:29:43 Re: Backing out of privilege grants rabbit hole
Previous Message Adrian Klaver 2020-04-03 17:18:09 Re: Backing out of privilege grants rabbit hole