To display information about permissions that have been granted to—or revoked from—users, groups, and roles, query the sysprotects table. The action column specifies the permission. For example, the action value for set proxy or set session authorization is equal to 167.
You might execute this query:
select * from sysprotects where action = 167
The results provide the user ID of the user who granted or revoked the permission (column grantor), the user ID of the user who has the permission (column uid), and the type of protection (column protecttype). The protecttype column can contain these values:
0 for grant with grant
1 for grant
2 for revoke
For more information about the sysprotects table, see the Reference Manual: Building Blocks.
