SHOW commands: Privilege updates¶

The behavior of the SHOW <objects> command is as follows:

Before the change:

The role used to execute the command requires the USAGE privilege on the object to see the objects.

For example, the SHOW SCHEMAS command requires the USAGE privilege on the schema.

Other privileges on the schema, such as MODIFY, are not sufficient to see the table objects in the schema.

After the change:

The role used to execute the command can be granted any privilege on the object to see the objects in the output.

For example, if the role used to execute the SHOW SCHEMAS command is granted the MODIFY privilege on the schema, the role can see those schemas in the output.

Consequently, the output of the SHOW command might return more objects than before the change depending on the grants to the role that executes the command.

These changes apply to all SHOW commands.

Ref: 1665