Top
Enterprise Postgres 17 Security Operation Guide

A.4 pgx_confidential_privilege

A list of confidentiality privileges.

You can refer to confidentiality privilege set for each confidentiality object, update time, and so on.

Column name

Type

Constraint

Description

cpriid

bigint

primary key
generated always as identity

Identifier of the privilege.

cprimatid

bigint

not null
references pgx_confidential_matrix(cmatid)

Identifier of the confidentiality matrix to which the privilege belongs.

cprilevid

bigint

not null
references pgx_confidential_level(clevid)

Identifier of the confidentiality level for which privilege is set.

cprigroid

bigint

not null
references pgx_confidential_group(cgroid)

Identifier of the confidentiality group for which privilege is set.

cpritype

text

not null

Type of the confidentiality object which privilege is set.

cpriupdatetime

timestamp with time zone

not null

Update time when privilege was set/changed.

cpriacl

text[]

not null

Access privileges that have been set. (*1)

*1: The character string indicating authority appears in the following order in the text type array of cpriacl.

ALL, SELECT, INSERT, UPDATE, DELETE, TRUNCATE, REFERENCES, TRIGGER, CREATE, CONNECT, TEMPORARY, EXECUTE, USAGE

If the appropriate privilege is not set, the string simply does not appear. For example, {'INSERT','TRUNCATE'} if you only have INSERT and TRUNCATE privileges.