Timeline for Postgres pg_read_all_stats default role cannot read from my schema
Current License: CC BY-SA 4.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Nov 21, 2019 at 15:33 | comment | added | Laurenz Albe | I have added another idea. | |
| Nov 21, 2019 at 15:32 | history | edited | Laurenz Albe | CC BY-SA 4.0 |
added 204 characters in body
|
| Nov 21, 2019 at 15:25 | comment | added | eignhpants |
normaluser will still be unable to read from the pg_statistic of schemas it does not have access to. A secondary step of GRANT on the schemaname is required which we don't want in our case.
|
|
| Nov 19, 2019 at 22:20 | comment | added | Laurenz Albe |
GRANT SELECT ON pg_statistic TO normaluser; and then the user can select from pg_statistic.
|
|
| Nov 19, 2019 at 20:30 | comment | added | eignhpants |
Unfortunately it still does not work, as the default role pg_read_all_stats explicitly only returns on tables that it already has access to. Since it can't access public by design, it can't do it.
|
|
| Nov 19, 2019 at 9:25 | history | answered | Laurenz Albe | CC BY-SA 4.0 |