rvkulikov / pg-deps-management

Perfectionism through suffering

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Grantee of a access right is not recorded

ehansmair opened this issue · comments

Thank you very much for pg-deps-management!

We set access rights to a admin role "xxx":

create view phpunit.aa_view as ( select a,b from phpunit.a_view union select b,a from phpunit.b_view);
grant select, insert, update, delete on phpunit.a, phpunit.a_view, phpunit.b_view, phpunit.aa_view to xxx with grant option;
set session authorization xxx;
grant select on phpunit.a_view to "Just_for_fun";
set session authorization default;

the acls are set like this:

grantee           privileges  grantor
====================================
Just_for_fun      r           xxx
xxx               a*r*w*d*    postgres
...

After deps_restore_dependencies() the rights are alle granted by postgres.

@ehansmair issue accepted, will fix in 3 days

DDL generation is incorrect in current algo.
This could take more time to fix.

image

Okay, it is only left to resolve grant order now. Or edit grants directly without statements
image