14.1. Synopsis¶

SHOW GRANTS

  ON { <entries> | <find_expression> }

find_expression ::=
  FIND ( { <type_expression> | <tag_expression> | NOT <tag_expression> } [ AND ... ] )

tag_expression ::=
  TAG = 'tag_name'

type_expression ::=
  TYPE = { BLOB | DEQUE | HSET | INT | INTEGER | STREAM | TAG | TS }

14.2. Description¶

SHOW GRANT will list the explicit access control for a database entry. This command requires the GET_ACL privilege.

..note ::

For security reasons, if the entry does not exist, SHOW GRANT will return an empty list. That way, an user cannot abuse the GET_ACL privilege to explore the database.

14.3. Parameters¶

entries

The name of the entries for which the access control list should be listed.

14.4. Examples¶

List the privileges on table:

SHOW GRANTS ON table1

List the privileges for everything tagged with ‘nyse’:

SHOW GRANTS ON FIND(tag='nyse')