Roles and privileges

Understanding who can do what is half of database security. RowDex puts it in a readable table instead of a set of catalog queries.

Roles#

Click Roles and privileges in the sidebar toolbar. The table lists each role with:

• Attributes, such as whether it can log in or create databases.
• Member of, the roles it inherits from.
• Valid until, when its password expires.

Use Filter roles to find one quickly.

Default privileges#

A separate table lists default privileges: grants that apply automatically to objects a role creates in the future. They never show up on existing tables, which makes them a common source of why can this user read the new table? questions.

Privileges on a table#

Open a table's structure and go to the Privileges tab to see who can read or write that table. See Table structure.

Row-level security#

The Policies tab on a table shows whether row-level security is enabled and lists its policies, so you can see which rows each role is allowed to touch.