From: | Siraj G <tosiraj(dot)g(at)gmail(dot)com> |
---|---|
To: | Erik Wienhold <ewie(at)ewie(dot)name> |
Cc: | "David G(dot) Johnston" <david(dot)g(dot)johnston(at)gmail(dot)com>, pgsql-admin(at)lists(dot)postgresql(dot)org |
Subject: | Re: Need help - Unable to grant a role |
Date: | 2024-02-29 06:58:54 |
Message-ID: | CAC5iy61X8-=AaJD__j6p6uezk_T9=wpC97ODLcaFtuLUs-w+pw@mail.gmail.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-admin |
Yes, the role is pg_write_server_files.
On Thu, Feb 29, 2024 at 9:18 AM Erik Wienhold <ewie(at)ewie(dot)name> wrote:
> On 2024-02-29 03:59 +0100, Siraj G wrote:
> > On Thu, Feb 29, 2024 at 7:40 AM David G. Johnston <
> david(dot)g(dot)johnston(at)gmail(dot)com> wrote:
> > > Since a PG role and a PG user are the same thing under the hood, the
> later
> > > simply meaning the role can login, then no. Though maybe you mean a OS
> > > user since you are dealing with operating system commands here...?
> >
> > Sorry for not giving the clarity. It is a GCP environment, we are trying
> to
> > import using the GCP feature from a backup (export) taken from another
> > instance in the same infra. While the user (hd*****) is created from the
> > GCP console for a specific instance, I can see its presence from "select
> *
> > from pg_user".
>
> Do you see that user on the old or the new instance?
>
> > Since I am trying to restore, I believe the user should have
> > pg_write_system_files role, hence trying to grant it.
>
> Do you mean pg_write_server_files or is pg_write_system_files a
> GCP-specific role? pg_write_server_files isn't necessary for restoring
> and you should be cautious about granting it because it's a powerful
> role that allows grantees to gain superuser-level access[1].
>
> [1] https://www.postgresql.org/docs/15/predefined-roles.html
>
> --
> Erik
>
From | Date | Subject | |
---|---|---|---|
Next Message | Laurenz Albe | 2024-02-29 08:00:09 | Re: Need help - Unable to grant a role |
Previous Message | Erik Wienhold | 2024-02-29 03:48:22 | Re: Need help - Unable to grant a role |