Files
DBAdmin/inbox/DataBase/PostgreSQL/dba_scripts/user_table_access.sh
T
2026-05-18 06:40:19 +00:00

60 lines
1.2 KiB
Bash

#!/bin/bash
# Shows Tables access for user specified
# SHOULD BE RUN AS SUPERUSER
USER=""
PORT=""
usage() {
echo "Usage: $0 -d <dbname> -a <user2check> [-U <user> -p <port>]"
exit 1
}
while getopts "d:a:p:uU:" OPT;
do case "${OPT}" in
d) DBNAME=$OPTARG
;;
a) CKUSER=$OPTARG
;;
p) PORT="-p $OPTARG"
;;
U) USER="-U $OPTARG"
;;
u) usage
;;
[?]) usage
esac;
done
if [ "$DBNAME" = "" ]
then
DBNAME="enf"
fi
if [ "$CKUSER" = "" ]
then
usage
exit 1
fi
psql $USER $PORT $DBNAME <<_CODE_
SELECT n.nspname,
c.relname,
array_to_string(ARRAY[c.relacl], '|') as permits,
position('useradmin' in array_to_string(ARRAY[relacl], '|'))
FROM pg_class c
JOIN pg_namespace n ON (n.oid = c.relnamespace)
WHERE n.nspname not like 'pg_%'
AND n.nspname not like 'inform_%'
AND relkind = 'r'
AND (position('$CKUSER' in array_to_string(ARRAY[relacl], '|')) > 0
OR position( (SELECT g.rolname
FROM pg_auth_members r
JOIN pg_authid g ON (r.roleid = g.oid)
JOIN pg_authid u ON (r.member = u.oid)
AND u.rolname LIKE '$CKUSER%') in array_to_string(ARRAY[relacl], '|')) > 0 )
ORDER BY 1,2;
_CODE_