Type __postgres_role does not modify role permissions, if changed #212

New Issue

ungleich-gitea · 2021-11-20T15:21:35Z

ungleich-gitea commented

2021-11-20 15:21:35 +00:00

Created by: telmich

I add:
__postgres_role app

I modify it to:

__postgres_role app --createdb

-> no permissions are changed, as the user already exists.

I think we should enhance this type to support adding and removing permissions

*Created by: telmich* I add: __postgres_role app I modify it to: __postgres_role app --createdb -> no permissions are changed, as the user already exists. I think we should enhance this type to support adding and removing permissions

ungleich-gitea added the

Stale

label 2021-11-20 15:21:35 +00:00

ungleich-gitea closed this issue

2021-11-20 15:21:36 +00:00

ungleich-gitea commented

2021-11-20 15:48:11 +00:00

closed

ungleich-gitea commented

2021-11-20 15:48:12 +00:00

Created by: markasoftware

Although it isn't too hard to check that attributes are right, there is no easy way to check if the password is correct. Perhaps it should unconditionally ALTER ROLE when state_is == state_should == present

*Created by: markasoftware* Although it isn't too hard to check that attributes are right, there is no easy way to check if the password is correct. Perhaps it should unconditionally `ALTER ROLE` when state_is == state_should == present

ungleich-gitea commented

2021-11-20 15:48:13 +00:00

Created by: telmich

Maybe introduce two new parameters to set / unset attributes?

--no-attribute <...>
--attribute <...>

and deprecate the current options?

@asteven, what do you think about this?

*Created by: telmich* Maybe introduce two new parameters to set / unset attributes? --no-attribute <...> --attribute <...> and deprecate the current options? @asteven, what do you think about this?

ungleich-gitea commented

2021-11-20 15:48:15 +00:00

Created by: telmich

22:58 < telmich> thus I was wondering, if there is a variant of \du
available, that is easily machine parsable
22:58 < johto> telmich; select * from pg_user;?

postgres=# select * from pg_user where usename = 'app';
usename | usesysid | usecreatedb | usesuper | usecatupd | userepl | passwd | valuntil | useconfig
---------+----------+-------------+----------+-----------+---------+----------+----------+-----------
app | 16384 | t | f | f | f | ******** | |
(1 row)

*Created by: telmich* 22:58 < telmich> thus I was wondering, if there is a variant of \du available, that is easily machine parsable 22:58 < johto> telmich; select \* from pg_user;? postgres=# select \* from pg_user where usename = 'app'; usename | usesysid | usecreatedb | usesuper | usecatupd | userepl | passwd | valuntil | useconfig ---------+----------+-------------+----------+-----------+---------+----------+----------+----------- app | 16384 | t | f | f | f | *******\* | | (1 row)

ungleich-gitea commented

2021-11-20 15:48:16 +00:00

Created by: telmich

postgres-# \du
List of roles
Role name | Attributes | Member of
-----------+------------------------------------------------+-----------
app | Create DB | {}
postgres | Superuser, Create role, Create DB, Replication | {}

postgres-#

http://www.postgresql.org/docs/8.1/static/role-attributes.html

*Created by: telmich* postgres-# \du List of roles Role name | Attributes | Member of -----------+------------------------------------------------+----------- app | Create DB | {} postgres | Superuser, Create role, Create DB, Replication | {} postgres-# http://www.postgresql.org/docs/8.1/static/role-attributes.html

Sign in to join this conversation.