#!/bin/bash

# Shows table access detail for user specified
# SHOULD BE RUN AS SUPERUSER

USER=""
PORT=""

usage() {
    echo "Usage: $0 -d <dbname> -a <user2check> [-U <user> -p <port>]"
    exit 1
}

while getopts "d:a:p:uU:" OPT;
do case "${OPT}" in
      d) DBNAME=$OPTARG
	 ;;
      a) CKUSER=$OPTARG
	 ;;
      p) PORT="-p $OPTARG"
	 ;;
      U) USER="-U $OPTARG"
	 ;;
      u) usage
	 ;;
    [?]) usage
   esac;
done

if [ "$DBNAME" = "" ]
  then
    DBNAME="enf"
fi

if [ "$CKUSER" = "" ]
  then
    usage
    exit 1
fi

psql $USER $PORT $DBNAME <<_CODE_
SELECT n.nspname,
       c.relname,
       CASE WHEN has_table_privilege('$CKUSER', quote_ident(n.nspname) || '.' || quote_ident(c.relname), 'SELECT')
	    THEN 'YES'
	    ELSE 'no'
	END AS "SEL",
       CASE WHEN has_table_privilege('$CKUSER', quote_ident(n.nspname) || '.' || quote_ident(c.relname), 'INSERT')
	    THEN 'YES'
	    ELSE 'no'
	END AS "INS",
       CASE WHEN has_table_privilege('$CKUSER', quote_ident(n.nspname) || '.' || quote_ident(c.relname), 'UPDATE')
	    THEN 'YES'
	    ELSE 'no'
	END AS "UPD",
       CASE WHEN has_table_privilege('$CKUSER', quote_ident(n.nspname) || '.' || quote_ident(c.relname), 'DELETE')
	    THEN 'YES'
	    ELSE 'no'
	END AS "DEL",
       array_to_string(ARRAY[c.relacl], '|') as permits
  FROM pg_class c
  JOIN pg_namespace n ON (n.oid = c.relnamespace)
WHERE n.nspname not like 'pg_%'
  AND n.nspname not like 'inform_%'
  AND relkind = 'r'
/*
  AND (position('$CKUSER' in array_to_string(ARRAY[relacl], '|')) > 0
  OR  position( (SELECT g.rolname
		 FROM pg_auth_members r
		 JOIN pg_authid g ON (r.roleid = g.oid)
		 JOIN pg_authid u ON (r.member = u.oid)
		  AND u.rolname LIKE '$CKUSER%') in array_to_string(ARRAY[relacl], '|')) > 0 )
*/
ORDER BY 1,2;

_CODE_