| Goal | This query performs a comprehensive security audit of access control lists (ACLs) across a wide range of database objects, including the database itself, schemas, domains, types, languages, sequences, foreign data wrappers, and foreign servers. It retrieves privileges granted to any principal other than the object's owner or the systemic postgres superuser. The objective is to identify and validate "third-party" access rights, ensuring compliance with the principle of least privilege and preventing unauthorized access accumulation. |
|---|---|
| Type | General (Overview of some aspect of the database.) |
| License | MIT (opens in new tab) |
| Data Source | system catalog only |
| SQL Query |
|
Collections
This query belongs to the following collections:
Find problems by overview
Queries that results point to different aspects of database that might have problems. A human reviewer has to decide based on the results as to whether there are problems or not .
| Name | Description |
|---|---|
| Find problems by overview | Queries that results point to different aspects of database that might have problems. A human reviewer has to decide based on the results as to whether there are problems or not . |
Categories
This query is classified under the following categories:
Data types
Queries of this category provide information about the data types and their usage.
Distributed database
Queries of this category provide information about the foreign table mechanism.
Domains
Queries of this category provide information about reusable specifications of column properties.
Security
Queries of this category provide information about the security measures.
Sequence generators
Queries of this category provide information about sequence generators and their usage.
| Name | Description |
|---|---|
| Data types | Queries of this category provide information about the data types and their usage. |
| Distributed database | Queries of this category provide information about the foreign table mechanism. |
| Domains | Queries of this category provide information about reusable specifications of column properties. |
| Security | Queries of this category provide information about the security measures. |
| Sequence generators | Queries of this category provide information about sequence generators and their usage. |
Further reading and related materials: