01007
Read PG 18 manual ↗privilege_not_granted
- SQLSTATE
- 01007
- Condition name
- privilege_not_granted
- Class
- Warning
- Source macro
- ERRCODE_WARNING_PRIVILEGE_NOT_GRANTED
- Evidence
- Source path confirmed
English SQLSTATE atlas: authored explanations and source/runtime evidence are separate from the manual definitions. View source ↗
At a glance
01007 has confirmed PostgreSQL 18.6 WARNING paths in src/backend/catalog/aclchk.c for GRANT. It reports an empty or partial grant and does not by itself mean the GRANT statement failed as an error.
Meaning
The confirmed 18.6 implementation is the ACL command path for GRANT. It distinguishes no privilege granted from not all privileges granted and uses column-specific and object-specific templates.
Messages and diagnostics
The fixed 18.6 paths use no privileges were granted for column "%s" of relation "%s", no privileges were granted for "%s", not all privileges were granted for column "%s" of relation "%s", and not all privileges were granted for "%s". The resolved groups have no detail or hint.
Diagnosis
Record whether the target was a column or object and the exact relation/object name. In the fixed aclchk.c function, this_privileges is the requested set intersected with the effective grantor's available grant options. The GRANT warning is none when that mask is zero, and partial when !all_privs and the mask differs from the request; this warning branch does not inspect the grantee's old ACL. Inspect the effective grantor, grant options, requested privileges, and then the resulting ACL separately. Distinguish the partial WARNING from an error-category permission failure.
Response
Check the resulting ACL and correct the role, target, privilege, or grant option identified by the operation. Reissuing unchanged GRANT is useful only after the privilege mismatch has been understood.
Versions
01007 is present from the locked 9.0.23 snapshot through 18.6 and 19 Beta 3, with known_present_by 8.0.0. The fixed 18.6 paths establish current source wording and severity, not identical historical text.
Sources
errcodes.txt— definition, SHA-2566e8de346643ba84aa3c9c6a73360acfc7b2dfb89162c06c08ce9bf5bcd5bbcba.aclchk.c— fixed path, SHA-2569700258318959b47c42edb423418fb511dd3a008023e732f601eecf4c80868f8.- Structured evidence — fixed sources, message groups, and runtime boundary.
Source evidence
Evidence belongs to the frozen source and runtime versions listed here. It is not a runtime verification of the selected manual version.
01007 is privilege_not_granted in SQLSTATE Class 01.
Method: Read the fixed errcodes definition row and macro.
A fixed PostgreSQL 18.6 source path uses this SQLSTATE at the stated severity and operation.
Method: Read the fixed source context around the SQLSTATE macro.
Limits: This confirms a source path and current wording; it is not a runtime observation of every installation.
The fixed aclchk.c function computes this_privileges as the requested privilege set intersected with the effective grantor's available grant options. The GRANT none branch warns when that mask is zero; the partial branch warns when !all_privs and the mask differs from the request. This warning branch does not inspect the grantee's old ACL; the resulting ACL must be checked separately.
Method: Read restrict_and_check_grant() and its fixed {op} report branches around aclchk.c lines 318-382.
Limits: This is a source-level warning condition; it does not claim a natural runtime or prescribe a universal role/ACL setup.
- src/backend/utils/errcodes.txt · REL_18_6 ·
724edf9bde9d356724ad384a2e196edc3c9f80f7 - src/backend/catalog/aclchk.c · REL_18_6 ·
724edf9bde9d356724ad384a2e196edc3c9f80f7 raw/calls/REL_18_6.jsonl· ·
Message templates
WARNING · src.aclchk.18.6
Primary
no privileges were granted for column "%s" of relation "%s"
WARNING · src.aclchk.18.6
Primary
no privileges were granted for "%s"
WARNING · src.aclchk.18.6
Primary
not all privileges were granted for column "%s" of relation "%s"
WARNING · src.aclchk.18.6
Primary
not all privileges were granted for "%s"
Reproduction & repair cases
No reproduction case is attached to this condition.
Recorded runtime evidence
No runtime observation is attached to this entry.
Definition snapshot: english-manuals:088eebfd1043340f4496ec7ba7f… · English manual source