The SELECT privilege can be granted on a property graph, and its
privileges can be examined with psql's \dp command, but property
graphs were missing from both summary tables in the "Privileges"
section: the applicable object types for SELECT in the privilege
abbreviations table, and the per-object-type row in the summary of
access privileges table. Add the missing entries so the tables match
the actual behavior described for the SELECT privilege and in GRANT.
While at it, also add a test for \dp on a property graph.
Author: Shinya Kato <shinya11.kato@gmail.com>
Reviewed-by: Ashutosh Bapat <ashutosh.bapat.oss@gmail.com>
Discussion: https://www.postgresql.org/message-id/flat/CAOzEurScgwLDXQmNFnDZANGAMMiva9GnLH_kO8qGtGVHUvVk2A%40mail.gmail.com
<entry><literal>r</literal> (<quote>read</quote>)</entry>
<entry>
<literal>LARGE OBJECT</literal>,
+ <literal>PROPERTY GRAPH</literal>,
<literal>SEQUENCE</literal>,
<literal>TABLE</literal> (and table-like objects),
table column
<entry>none</entry>
<entry><literal>\dconfig+</literal></entry>
</row>
+ <row>
+ <entry><literal>PROPERTY GRAPH</literal></entry>
+ <entry><literal>r</literal></entry>
+ <entry>none</entry>
+ <entry><literal>\dp</literal></entry>
+ </row>
<row>
<entry><literal>SCHEMA</literal></entry>
<entry><literal>UC</literal></entry>
grant select on property graph ptg1 to regress_priv_user2;
set session role regress_priv_user2;
+\dp ptg1
+ Access privileges
+ Schema | Name | Type | Access privileges | Column privileges | Policies
+--------+------+----------------+-----------------------------------------+-------------------+----------
+ public | ptg1 | property graph | regress_priv_user1=r/regress_priv_user1+| |
+ | | | regress_priv_user2=r/regress_priv_user1 | |
+(1 row)
+
select * from graph_table (ptg1 match (is atest1) COLUMNS (1 as value)) limit 0; -- ok
value
-------
select * from graph_table (ptg1 match (is atest5) COLUMNS (1 as value)) limit 0; -- ok
grant select on property graph ptg1 to regress_priv_user2;
set session role regress_priv_user2;
+\dp ptg1
select * from graph_table (ptg1 match (is atest1) COLUMNS (1 as value)) limit 0; -- ok
-- select privileges on property graph but not table
select * from graph_table (ptg1 match (is atest5) COLUMNS (1 as value)) limit 0; -- fails