Re: permissions on system catalogs for non-superuser?

Robert Gravsjö <robert@xxxxxxxx> · Fri, 12 Oct 2007 10:50:43 +0200

Kevin Kempter wrote:
Hi List;

we have some monitoring/alert scripts which run sql against the database 
(8.1.4) as a non-superuser. The problem is I get <insufficient privilege> 
when trying to access current_query from pg_stat_activity. 

I ran these grant statements but still no joy:
grant select on pg_stat_activity to monitor_user;
grant select on pg_database to monitor_user;

IIRC you need select priv on pg_authid too.

Regards,
roppert

Here's what I get while logged into psql as monitor_user:

select procpid, current_query from pg_stat_activity;
 procpid |      current_query
---------+--------------------------
   24589 | <IDLE>
   24601 | <insufficient privilege>
   24600 | <insufficient privilege>
   24598 | <insufficient privilege>
   24596 | <insufficient privilege>
   24594 | <insufficient privilege>
   24367 | <insufficient privilege>
   24511 | <insufficient privilege> 

Thanks in advance

/Kevin

---------------------------(end of broadcast)---------------------------
TIP 6: explain analyze is your friend

---------------------------(end of broadcast)---------------------------
TIP 2: Don't 'kill -9' the postmaster