Diego Imbert 2bc39481da fix(datatables): cover routines in ownership, grants and default privileges ...

Functions live in pg_proc, so a schema changing hands left them behind and a
grant on ALL FUNCTIONS disappeared from the drawer on the next read, with no
way to revoke it. Read them alongside pg_class, and name them by their
identity arguments, which is what tells two of one name apart.

ALTER DEFAULT PRIVILEGES binds only the roles it names, so a role created
after a 'created later' grant produced tables no one else could read.
Replay the rules already in force for each new role.

2026-09-01 04:09:19 +02:00

1.0 MiB

Raw Blame History