Doc: specify aclitem syntax more clearly.

The previous wording here relied solely on an example to explain
aclitem output format.  Add an actual syntax synopsis and
explanation of the elements to make it clearer.

David Johnston and Tom Lane, per gripe from Eugen Konkov.

Discussion: https://postgr.es/m/170326116972.1876499.18357820037829248593@wrigleys.postgresql.org

diff --git a/doc/src/sgml/ddl.sgml b/doc/src/sgml/ddl.sgml
index d2951cd754c68237cd97eedd9c4353a671ad0995..22d04006ade5a9425443e6fb524b9baed5422e16 100644 (file)
--- a/doc/src/sgml/ddl.sgml
+++ b/doc/src/sgml/ddl.sgml
@@ -2318,9 +2318,16 @@ REVOKE ALL ON accounts FROM PUBLIC;
     aclitem
    
    The privileges that have been granted for a particular object are
-   displayed as a list of aclitem entries, where each
-   aclitem describes the permissions of one grantee that
-   have been granted by a particular grantor.  For example,
+   displayed as a list of aclitem entries, each having the
+   format:
+
+grantee=privilege-abbreviation*.../grantor
+
+   Each aclitem lists all the permissions of one grantee that
+   have been granted by a particular grantor.  Specific privileges are
+   represented by one-letter abbreviations from
+   , with *
+   appended if the privilege was granted with grant option.  For example,
    calvin=r*w/hobbes specifies that the role
    calvin has the privilege
    SELECT (r) with grant option