## 52.87. `pg_shadow`

[]()

 The view `pg_shadow` exists for backwards compatibility: it emulates a catalog that existed in PostgreSQL before version 8.1. It shows properties of all roles that are marked as `rolcanlogin` in [`pg_authid`](catalog-pg-authid.html).

 The name stems from the fact that this table should not be readable by the public since it contains passwords. [`pg_user`](view-pg-user.html) is a publicly readable view on `pg_shadow` that blanks out the password field.

**Table 52.88. `pg_shadow` Columns**

|                                                                 Column Type<br/><br/> Description                                                                 |
|-------------------------------------------------------------------------------------------------------------------------------------------------------------------|
|                                 `usename` `name` (references [`pg_authid`](catalog-pg-authid.html).`rolname`)<br/><br/> User name                                 |
|                                `usesysid` `oid` (references [`pg_authid`](catalog-pg-authid.html).`oid`)<br/><br/> ID of this user                                |
|                                                     `usecreatedb` `bool`<br/><br/> User can create databases                                                      |
|                                                          `usesuper` `bool`<br/><br/> User is a superuser                                                          |
|                         `userepl` `bool`<br/><br/> User can initiate streaming replication and put the system in and out of backup mode.                          |
|           `usebypassrls` `bool`<br/><br/> User bypasses every row-level security policy, see [Section 5.8](ddl-rowsecurity.html) for more information.            |
|`passwd` `text`<br/><br/> Password (possibly encrypted); null if none. See [`pg_authid`](catalog-pg-authid.html) for details of how encrypted passwords are stored.|
|                                  `valuntil` `timestamptz`<br/><br/> Password expiry time (only used for password authentication)                                  |
|                                       `useconfig` `text[]`<br/><br/> Session defaults for run-time configuration variables                                        |

