Skip to content

Commit 8706723

Browse files
committed
test
1 parent 98bd76c commit 8706723

File tree

1 file changed

+12
-2
lines changed
  • ansible/files/admin_api_scripts/pg_upgrade_scripts

1 file changed

+12
-2
lines changed

ansible/files/admin_api_scripts/pg_upgrade_scripts/initiate.sh

Lines changed: 12 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -541,9 +541,19 @@ begin
541541
for rec in
542542
select grantor, grantee, privilege_type, is_grantable
543543
from aclexplode((obj->>'acl')::aclitem[])
544-
where grantee = 'postgres'::regrole
544+
where grantee::regrole in ('postgres', 'supabase_admin')
545+
loop
546+
execute(format('revoke %s on schema %s from %I', rec.privilege_type, (obj->>'oid')::regnamespace, case when rec.grantee = 'postgres'::regrole then 'supabase_admin' else 'postgres' end));
547+
end loop;
548+
end loop;
549+
foreach obj in array schemas
550+
loop
551+
for rec in
552+
select grantor, grantee, privilege_type, is_grantable
553+
from aclexplode((obj->>'acl')::aclitem[])
554+
where grantee::regrole in ('postgres', 'supabase_admin')
545555
loop
546-
execute(format('grant %s on schema %s to postgres %s', rec.privilege_type, (obj->>'oid')::regnamespace, case when rec.is_grantable then 'with grant option' else '' end));
556+
execute(format('grant %s on schema %s to %I', rec.privilege_type, (obj->>'oid')::regnamespace, rec.grantee::regrole));
547557
end loop;
548558
end loop;
549559

0 commit comments

Comments
 (0)