60 lines
1.2 KiB
Bash
60 lines
1.2 KiB
Bash
#!/bin/bash
|
|
|
|
# Shows Tables access for user specified
|
|
# SHOULD BE RUN AS SUPERUSER
|
|
|
|
USER=""
|
|
PORT=""
|
|
|
|
usage() {
|
|
echo "Usage: $0 -d <dbname> -a <user2check> [-U <user> -p <port>]"
|
|
exit 1
|
|
}
|
|
|
|
while getopts "d:a:p:uU:" OPT;
|
|
do case "${OPT}" in
|
|
d) DBNAME=$OPTARG
|
|
;;
|
|
a) CKUSER=$OPTARG
|
|
;;
|
|
p) PORT="-p $OPTARG"
|
|
;;
|
|
U) USER="-U $OPTARG"
|
|
;;
|
|
u) usage
|
|
;;
|
|
[?]) usage
|
|
esac;
|
|
done
|
|
|
|
if [ "$DBNAME" = "" ]
|
|
then
|
|
DBNAME="enf"
|
|
fi
|
|
|
|
if [ "$CKUSER" = "" ]
|
|
then
|
|
usage
|
|
exit 1
|
|
fi
|
|
|
|
psql $USER $PORT $DBNAME <<_CODE_
|
|
SELECT n.nspname,
|
|
c.relname,
|
|
array_to_string(ARRAY[c.relacl], '|') as permits,
|
|
position('useradmin' in array_to_string(ARRAY[relacl], '|'))
|
|
FROM pg_class c
|
|
JOIN pg_namespace n ON (n.oid = c.relnamespace)
|
|
WHERE n.nspname not like 'pg_%'
|
|
AND n.nspname not like 'inform_%'
|
|
AND relkind = 'r'
|
|
AND (position('$CKUSER' in array_to_string(ARRAY[relacl], '|')) > 0
|
|
OR position( (SELECT g.rolname
|
|
FROM pg_auth_members r
|
|
JOIN pg_authid g ON (r.roleid = g.oid)
|
|
JOIN pg_authid u ON (r.member = u.oid)
|
|
AND u.rolname LIKE '$CKUSER%') in array_to_string(ARRAY[relacl], '|')) > 0 )
|
|
ORDER BY 1,2;
|
|
|
|
_CODE_
|