Alex Chi Z 6921577cec
compute_ctl: grant default privileges on table to neon_superuser ( #6845 ) ...
## Problem
fix https://github.com/neondatabase/neon/issues/6236 again
## Summary of changes
This pull request adds a setup command in compute spec to modify default
privileges of public schema to have full permission on table/sequence
for neon_superuser. If an extension upgrades to superuser during
creation, the tables/sequences they create in the public schema will be
automatically granted to neon_superuser.
Questions:
* does it impose any security flaws? public schema should be fine...
* for all extensions that create tables in schemas other than public, we
will need to manually handle them (e.g., pg_anon).
* we can modify some extensions to remove their superuser requirement in
the future.
* we may contribute to Postgres to allow for the creation of extensions
with a specific user in the future.
---------
Signed-off-by: Alex Chi Z <chi@neon.tech >
2024-02-21 16:09:34 -05:00
2023-09-12 15:11:32 +02:00
2024-02-11 01:34:31 +02:00
2024-02-16 21:26:59 +01:00
2024-02-16 15:53:09 +00:00
2024-02-11 01:34:31 +02:00
2024-02-01 20:50:04 +00:00
2023-04-13 14:34:29 +03:00
2023-11-20 15:41:37 +01:00
2024-02-11 01:34:31 +02:00
2023-12-15 08:51:23 +00:00
2024-01-17 18:01:08 +00:00
2023-10-27 10:47:11 +01:00
2023-12-20 12:26:20 +00:00
2024-02-11 01:34:31 +02:00
2023-09-08 16:19:57 +01:00
2024-02-21 09:49:46 +00:00
2024-02-11 01:34:31 +02:00
2024-01-05 15:35:07 +00:00
2024-02-11 01:34:31 +02:00
2024-02-11 01:34:31 +02:00
2024-02-11 01:34:31 +02:00
2024-02-13 09:00:50 +02:00
2023-11-27 18:57:58 +00:00
2023-12-07 12:27:16 +00:00
2023-04-13 14:34:29 +03:00
2024-02-11 01:34:31 +02:00
2024-02-11 01:34:31 +02:00
2024-01-02 10:50:20 +04:00
2024-02-11 01:34:31 +02:00
2023-09-08 16:19:57 +01:00
2024-02-11 01:34:31 +02:00
2024-01-05 15:35:07 +00:00
2023-09-15 11:17:18 +01:00
2024-01-03 14:22:17 +00:00
2024-02-11 01:34:31 +02:00
2023-11-23 08:59:19 +02:00
2024-01-31 17:37:25 +02:00
2024-02-11 01:34:31 +02:00
2024-02-11 01:34:31 +02:00
2024-02-21 16:09:34 -05:00
2024-02-11 01:34:31 +02:00
2023-12-07 12:27:16 +00:00
2024-02-11 01:34:31 +02:00
2024-01-26 18:23:53 +00:00
2024-02-09 20:22:53 +00:00
2024-01-29 07:39:16 +02:00
2023-04-13 14:34:29 +03:00
2024-02-11 01:34:31 +02:00
2024-02-21 19:39:14 +00:00
2024-01-05 15:35:07 +00:00
2023-04-13 14:34:29 +03:00
2024-02-16 13:00:53 +00:00
2023-12-12 18:00:37 +01:00
2024-01-23 07:55:05 +02:00
2024-01-26 14:40:47 +00:00
2023-11-07 16:57:26 +00:00
2024-02-20 17:34:12 +01:00
2024-02-11 01:34:31 +02:00
2024-01-26 14:40:47 +00:00
2023-12-05 18:49:24 +02:00
2024-02-11 01:34:31 +02:00
2024-02-21 18:24:59 +01:00
2023-09-16 18:05:35 +03:00
2023-11-15 09:15:59 +00:00
2024-02-20 10:44:46 +00:00
2023-09-08 16:19:57 +01:00
2024-02-11 01:34:31 +02:00
2024-02-11 01:34:31 +02:00
2024-02-11 01:34:31 +02:00
2024-02-20 17:52:23 +01:00
2024-02-02 23:45:57 +01:00
2023-07-18 12:56:40 +03:00
2024-02-21 16:35:37 +01:00
2024-02-21 17:03:55 +00:00
2023-08-03 17:20:24 +03:00
2024-02-11 01:34:31 +02:00
2023-12-08 17:32:16 +00:00
2024-02-12 19:15:21 +01:00
2024-02-05 14:49:35 +02:00
2024-02-11 01:34:31 +02:00
2023-09-29 09:15:43 +01:00
2023-06-15 17:30:12 +03:00
2024-02-11 01:34:31 +02:00
2024-02-16 14:53:36 +00:00
2023-12-12 18:00:37 +01:00
2024-02-09 09:01:07 +00:00
2024-02-11 01:34:31 +02:00
2023-07-18 12:56:40 +03:00
2024-02-11 01:34:31 +02:00
2023-04-13 14:34:29 +03:00
2024-02-21 12:36:57 +00:00
2024-01-30 18:05:22 +04:00
2024-02-11 01:34:31 +02:00
2023-06-19 15:59:38 +04:00
2024-02-19 17:27:02 +01:00
2023-09-15 11:17:18 +01:00
6921577cec