From: | zardozwildman(at)hotmail(dot)com |
---|---|
To: | pgsql-bugs(at)postgresql(dot)org |
Subject: | BUG #7791: create database with owner, owner does not get usage on schema |
Date: | 2013-01-06 06:14:04 |
Message-ID: | E1TrjUi-0007ep-BQ@wrigleys.postgresql.org |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-bugs |
The following bug has been logged on the website:
Bug reference: 7791
Logged by: Brice Breeden
Email address: zardozwildman(at)hotmail(dot)com
PostgreSQL version: 9.1.7
Operating system: windows x64
Description:
This database creation script was executed via the postgres superuser.
Executes create database and the "with owner" clause.
Create database assigns ownership to a role (myta_admin_role). This is not a
login role.
After database creation, script creates a schema. I later discovered that
the role never gets usage permission on the schema. Even though it is the
database owner.
My workaround was to remove the "with owner" clause. And explicitly set
schema permissions on the role.
I am providing a portion of the script for reference.
do
$$
begin
if (not exists (select * from information_schema.enabled_roles where
lower(role_name)=lower('myta_admin_role'))) then
create role myta_admin_role superuser createdb createrole replication;
end if;
end;
$$;
do
$$
begin
if (not exists (select * from information_schema.enabled_roles where
lower(role_name)=lower('myta_svc_role'))) then
create role myta_svc_role;
end if;
end;
$$;
-- Database creation can't be made conditional in postgres.
-- NOTE: Declaring one of our roles as owner doesn't seem to work.
-- Postgres doesn't give myta_admin_role usage rights on the myta schema.
-- Even though it's declared as the owner.
-- So we'll let ownership default to the superuser. And grant
-- the rights ourselves.
create database mytadb
with owner=myta_admin_role
encoding='UTF8'
tablespace=pg_default
LC_COLLATE='English_United States.1252'
LC_CTYPE='English_United States.1252'
CONNECTION LIMIT = -1;
\connect mytadb
do
$$
begin
if (not exists (select * from pg_namespace where nspname='myta')) then
create schema myta;
end if;
end;
$$;
From | Date | Subject | |
---|---|---|---|
Next Message | emesika | 2013-01-06 13:45:01 | BUG #7792: pg_dump does not treat -c flag correctly when using tar format |
Previous Message | luisa.j.francisco | 2013-01-06 04:58:07 | BUG #7790: null filters in CTEs don't work |