supabase / supautils

PostgreSQL extension that secures a cluster on a cloud environment

Home Page:https://supabase.github.io/supautils

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Allow users to be created with `replication` permissions

kiwicopple opened this issue · comments

Chore

Describe the chore

We allow replication on supabase (eg: the postgres role has this permission) but we do not allow our users to create new roles with this permission.

For example:

create role foo with replication login password 'xyz';

image

Should we allow this on the platform?

Yes please. This would certainly reduce the time required to set up replication, as it now forces you to email the support team and ask for this change from them

RDS grants this ability indirectly through a role: https://stackoverflow.com/a/61912789/4692662

Not sure yet why they do that.

RDS grants this ability indirectly through a role: https://stackoverflow.com/a/61912789/4692662

Not sure yet why they do that.

Probably because the replication permission is built-in, whereas theirs has "magic under the hood" to achieve the same objective but circumventing the need for superuser access

we want to setup Airbyte, and it asks for a new user with REPLICATION access, so we would need superuser permission in the postgres role 😄

https://docs.airbyte.com/integrations/sources/postgres

Resolved in #80; this will be made available on the platform soon!