01007 — privilege_not_granted

01007 has confirmed PostgreSQL 18.6 WARNING paths in src/backend/catalog/aclchk.c for GRANT. It reports an empty or partial grant and does not by itself mean the GRANT statement failed as an error.

English manual coverage begins with PostgreSQL 8.1. Source history and runtime observations have their own recorded version boundaries.

Reading PG 18·Select a recorded version

8.1 8.2 8.3 8.4 9.0 9.1 9.2 9.3 9.4 9.5 9.6 10 11 12 13 14 15 16 17 18 19 20

aliases: Unknown
class name: Warning
condition name: privilege_not_granted
lang: en
sqlstate: 01007

Definition PG 18

01007 — privilege_not_granted

At a glance {#at-a-glance}

01007 has confirmed PostgreSQL 18.6 WARNING paths in src/backend/catalog/aclchk.c for GRANT. It reports an empty or partial grant and does not by itself mean the GRANT statement failed as an error.

Meaning {#meaning}

The confirmed 18.6 implementation is the ACL command path for GRANT. It distinguishes no privilege granted from not all privileges granted and uses column-specific and object-specific templates.

Messages and diagnostics {#messages}

The fixed 18.6 paths use no privileges were granted for column "%s" of relation "%s", no privileges were granted for "%s", not all privileges were granted for column "%s" of relation "%s", and not all privileges were granted for "%s". The resolved groups have no detail or hint.

Diagnosis {#diagnosis}

Record whether the target was a column or object and the exact relation/object name. In the fixed aclchk.c function, this_privileges is the requested set intersected with the effective grantor's available grant options. The GRANT warning is none when that mask is zero, and partial when !all_privs and the mask differs from the request; this warning branch does not inspect the grantee's old ACL. Inspect the effective grantor, grant options, requested privileges, and then the resulting ACL separately. Distinguish the partial WARNING from an error-category permission failure.

Response {#response}

Check the resulting ACL and correct the role, target, privilege, or grant option identified by the operation. Reissuing unchanged GRANT is useful only after the privilege mismatch has been understood.

Versions {#versions}

01007 is present from the locked 9.0.23 snapshot through 18.6 and 19 Beta 3, with known_present_by 8.0.0. The fixed 18.6 paths establish current source wording and severity, not identical historical text.

Related {#related}

01006 is the privilege-not-revoked warning; 42501 is a permission error; 01000 is the warning class.

Sources {#sources}

errcodes.txt — definition, SHA-256 6e8de346643ba84aa3c9c6a73360acfc7b2dfb89162c06c08ce9bf5bcd5bbcba.
aclchk.c — fixed path, SHA-256 9700258318959b47c42edb423418fb511dd3a008023e732f601eecf4c80868f8.
Structured evidence — fixed sources, message groups, and runtime boundary.

Compare versions

SQLSTATE evidence and recorded runtime versions

claims · identity

{
  "claim_id": "identity",
  "limits": "",
  "method": "Read the fixed errcodes definition row and macro.",
  "position": 0,
  "runtime": [],
  "sources": [
    "src.errcodes.18.6"
  ],
  "statement": "01007 is privilege_not_granted in SQLSTATE Class 01."
}

claims · source-path

{
  "claim_id": "source-path",
  "limits": "This confirms a source path and current wording; it is not a runtime observation of every installation.",
  "method": "Read the fixed source context around the SQLSTATE macro.",
  "position": 1,
  "runtime": [],
  "sources": [
    "src.aclchk.18.6"
  ],
  "statement": "A fixed PostgreSQL 18.6 source path uses this SQLSTATE at the stated severity and operation."
}

claims · acl-effective-grantor

{
  "claim_id": "acl-effective-grantor",
  "limits": "This is a source-level warning condition; it does not claim a natural runtime or prescribe a universal role/ACL setup.",
  "method": "Read restrict_and_check_grant() and its fixed {op} report branches around aclchk.c lines 318-382.",
  "position": 2,
  "runtime": [],
  "sources": [
    "src.aclchk.18.6"
  ],
  "statement": "The fixed aclchk.c function computes this_privileges as the requested privilege set intersected with the effective grantor's available grant options. The GRANT none branch warns when that mask is zero; the partial branch warns when !all_privs and the mask differs from the request. This warning branch does not inspect the grantee's old ACL; the resulting ACL must be checked separately."
}

messages · acl-grant-column-none

{
  "limits": "",
  "message_id": "acl-grant-column-none",
  "path": "src.aclchk.18.6",
  "position": 0,
  "raw": {
    "id": "acl-grant-column-none",
    "path": "src.aclchk.18.6",
    "primary_template": "no privileges were granted for column \"%s\" of relation \"%s\"",
    "severity": "WARNING",
    "source_ids": [
      "src.aclchk.18.6"
    ],
    "sources": [
      "src.aclchk.18.6"
    ],
    "sqlstate": "01007"
  },
  "severity": "WARNING",
  "sources": [
    "src.aclchk.18.6"
  ],
  "templates": [
    {
      "kind": "primary",
      "literal": "no privileges were granted for column \" \" of relation \" \"",
      "position": 0,
      "role": "",
      "template": "no privileges were granted for column \"%s\" of relation \"%s\""
    }
  ]
}

messages · acl-grant-object-none

{
  "limits": "",
  "message_id": "acl-grant-object-none",
  "path": "src.aclchk.18.6",
  "position": 1,
  "raw": {
    "id": "acl-grant-object-none",
    "path": "src.aclchk.18.6",
    "primary_template": "no privileges were granted for \"%s\"",
    "severity": "WARNING",
    "source_ids": [
      "src.aclchk.18.6"
    ],
    "sources": [
      "src.aclchk.18.6"
    ],
    "sqlstate": "01007"
  },
  "severity": "WARNING",
  "sources": [
    "src.aclchk.18.6"
  ],
  "templates": [
    {
      "kind": "primary",
      "literal": "no privileges were granted for \" \"",
      "position": 0,
      "role": "",
      "template": "no privileges were granted for \"%s\""
    }
  ]
}

messages · acl-grant-column-partial

{
  "limits": "",
  "message_id": "acl-grant-column-partial",
  "path": "src.aclchk.18.6",
  "position": 2,
  "raw": {
    "id": "acl-grant-column-partial",
    "path": "src.aclchk.18.6",
    "primary_template": "not all privileges were granted for column \"%s\" of relation \"%s\"",
    "severity": "WARNING",
    "source_ids": [
      "src.aclchk.18.6"
    ],
    "sources": [
      "src.aclchk.18.6"
    ],
    "sqlstate": "01007"
  },
  "severity": "WARNING",
  "sources": [
    "src.aclchk.18.6"
  ],
  "templates": [
    {
      "kind": "primary",
      "literal": "not all privileges were granted for column \" \" of relation \" \"",
      "position": 0,
      "role": "",
      "template": "not all privileges were granted for column \"%s\" of relation \"%s\""
    }
  ]
}

messages · acl-grant-object-partial

{
  "limits": "",
  "message_id": "acl-grant-object-partial",
  "path": "src.aclchk.18.6",
  "position": 3,
  "raw": {
    "id": "acl-grant-object-partial",
    "path": "src.aclchk.18.6",
    "primary_template": "not all privileges were granted for \"%s\"",
    "severity": "WARNING",
    "source_ids": [
      "src.aclchk.18.6"
    ],
    "sources": [
      "src.aclchk.18.6"
    ],
    "sqlstate": "01007"
  },
  "severity": "WARNING",
  "sources": [
    "src.aclchk.18.6"
  ],
  "templates": [
    {
      "kind": "primary",
      "literal": "not all privileges were granted for \" \"",
      "position": 0,
      "role": "",
      "template": "not all privileges were granted for \"%s\""
    }
  ]
}

sources · src.errcodes.18.6

{
  "commit": "724edf9bde9d356724ad384a2e196edc3c9f80f7",
  "docs_url": "",
  "kind": "upstream_source",
  "location": "",
  "path": "src/backend/utils/errcodes.txt",
  "position": 0,
  "sha256": "6e8de346643ba84aa3c9c6a73360acfc7b2dfb89162c06c08ce9bf5bcd5bbcba",
  "source_id": "src.errcodes.18.6",
  "tag": "REL_18_6",
  "url": "https://github.com/postgres/postgres/blob/724edf9bde9d356724ad384a2e196edc3c9f80f7/src/backend/utils/errcodes.txt"
}

sources · src.aclchk.18.6

{
  "commit": "724edf9bde9d356724ad384a2e196edc3c9f80f7",
  "docs_url": "",
  "kind": "upstream_source",
  "location": "",
  "path": "src/backend/catalog/aclchk.c",
  "position": 1,
  "sha256": "9700258318959b47c42edb423418fb511dd3a008023e732f601eecf4c80868f8",
  "source_id": "src.aclchk.18.6",
  "tag": "REL_18_6",
  "url": "https://github.com/postgres/postgres/blob/724edf9bde9d356724ad384a2e196edc3c9f80f7/src/backend/catalog/aclchk.c#L318-L382"
}

sources · src.calls.REL_18_6

{
  "commit": "",
  "docs_url": "",
  "kind": "local_artifact",
  "location": "",
  "path": "raw/calls/REL_18_6.jsonl",
  "position": 2,
  "sha256": "9ee8a0e81d8f0825c5c1ae45583439859a26e602bdd4ce2f2a62aa278867ccbf",
  "source_id": "src.calls.REL_18_6",
  "tag": "",
  "url": ""
}

Source references

Original manual reference

Full definition and evidence JSON

Definition sources

center · PostgreSQL 18 · english-manuals:a5b2a7d51c00286e452ccd7f0f6bd2c055ecfe205ee0b287b2f1c19c0d433b44

Text language: en · english-manuals:a5b2a7d51c00286e452ccd7f0f6bd2c055ecfe205ee0b287b2f1c19c0d433b44