Re: Need help - Unable to grant a role

From: Siraj G <tosiraj(dot)g(at)gmail(dot)com>
To: Erik Wienhold <ewie(at)ewie(dot)name>
Cc: "David G(dot) Johnston" <david(dot)g(dot)johnston(at)gmail(dot)com>, pgsql-admin(at)lists(dot)postgresql(dot)org
Subject: Re: Need help - Unable to grant a role
Date: 2024-02-29 06:58:54
Message-ID: CAC5iy61X8-=AaJD__j6p6uezk_T9=wpC97ODLcaFtuLUs-w+pw@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

Yes, the role is pg_write_server_files.

On Thu, Feb 29, 2024 at 9:18 AM Erik Wienhold <ewie(at)ewie(dot)name> wrote:

> On 2024-02-29 03:59 +0100, Siraj G wrote:
> > On Thu, Feb 29, 2024 at 7:40 AM David G. Johnston <
> david(dot)g(dot)johnston(at)gmail(dot)com> wrote:
> > > Since a PG role and a PG user are the same thing under the hood, the
> later
> > > simply meaning the role can login, then no. Though maybe you mean a OS
> > > user since you are dealing with operating system commands here...?
> >
> > Sorry for not giving the clarity. It is a GCP environment, we are trying
> to
> > import using the GCP feature from a backup (export) taken from another
> > instance in the same infra. While the user (hd*****) is created from the
> > GCP console for a specific instance, I can see its presence from "select
> *
> > from pg_user".
>
> Do you see that user on the old or the new instance?
>
> > Since I am trying to restore, I believe the user should have
> > pg_write_system_files role, hence trying to grant it.
>
> Do you mean pg_write_server_files or is pg_write_system_files a
> GCP-specific role? pg_write_server_files isn't necessary for restoring
> and you should be cautious about granting it because it's a powerful
> role that allows grantees to gain superuser-level access[1].
>
> [1] https://www.postgresql.org/docs/15/predefined-roles.html
>
> --
> Erik
>

In response to

Browse pgsql-admin by date

  From Date Subject
Next Message Laurenz Albe 2024-02-29 08:00:09 Re: Need help - Unable to grant a role
Previous Message Erik Wienhold 2024-02-29 03:48:22 Re: Need help - Unable to grant a role