information_schema.role_table_grants

2025-12-04 07:10:03  Updated

Note

This view was introduced in OceanBase Database V4.2.4.

Purpose

The information_schema.role_table_grants view displays the table-level privileges of activated roles granted to the user in the current session, and the table-level privileges of other roles granted to these roles.

Columns

Column Type Nullable? Description
GRANTOR varchar(97) YES The username of the account that grants privileges to the role.
GRANTOR_HOST varchar(256) YES The hos tname of the account that grants privileges to the role.
GRANTEE varchar(32) NO The username of the account corresponding to the role.
GRANTEE_HOST varchar(255) NO The host name of the account corresponding to the role.
TABLE_CATALOG varchar(3) NO The name of the catalog on which the role is granted privileges. The value of this column is always def.
TABLE_SCHEMA varchar(64) NO The name of the database containing the table on which the role is granted privileges.
TABLE_NAME varchar(64) NO The name of the table on which the role is granted privileges.
PRIVILEGE_TYPE varchar(90) NO The granted privileges. The value can be any privileges at the table level.
IS_GRANTABLE varchar(3) NO Indicates whether the privileges of the role can be granted to other users.

Sample query

  1. Create a role and a table.

    obclient [test]> CREATE ROLE employee;
    
    obclient [test]> CREATE TABLE tbl1(c1 int, c2 int, c3 int);
    
  2. Grant table-level privileges to the role.

    obclient [test]> GRANT DROP,UPDATE,SELECT ON test.tbl1 TO employee WITH GRANT OPTION;
    
  3. Assign the role to the user1 user.

    obclient [test]> GRANT employee TO user1;
    
  4. Connect to the database as the user1 user.

  5. Activate the employee role in the current session.

    obclient [test]> SET ROLE employee;
    
  6. Query the table-level privileges of the activated role assigned to the user in the current session.

    obclient [test]> USE information_schema;
    
    obclient [test]> SELECT * FROM information_schema.role_table_grants;
    

    The query result is as follows:

    +---------+--------------+-----------+--------------+---------------+--------------+------------+--------------------+--------------+
    | GRANTOR | GRANTOR_HOST | GRANTEE   | GRANTEE_HOST | TABLE_CATALOG | TABLE_SCHEMA | TABLE_NAME | PRIVILEGE_TYPE     | IS_GRANTABLE |
    +---------+--------------+-----------+--------------+---------------+--------------+------------+--------------------+--------------+
    | root    | %            | employee  | %            | def           | test         | tbl1       | Drop,Update,Select | YES          |
    +---------+--------------+-----------+--------------+---------------+--------------+------------+--------------------+--------------+
    1 row in set
    

Contact Us