test

Author: soedirgo

ansible/files/admin_api_scripts/pg_upgrade_scripts/initiate.sh

@@ -435,8 +435,6 @@ begin
   update pg_db_role_setting set setconfig = supabase_admin_role_settings where setdatabase = 0 and setrole = 'supabase_admin'::regrole;
 
   reassign owned by postgres to supabase_admin;
-  -- TODO
-  drop owned by postgres;
 
   -- databases
   for rec in
@@ -545,7 +543,6 @@ begin
       from aclexplode((obj->>'acl')::aclitem[])
       where grantee = 'postgres'::regrole
     loop
-      execute(format('revoke all on schema %s from supabase_admin', (obj->>'oid')::regnamespace));
       execute(format('grant %s on schema %s to postgres %s', rec.privilege_type, (obj->>'oid')::regnamespace, case when rec.is_grantable then 'with grant option' else '' end));
     end loop;
   end loop;
@@ -561,7 +558,6 @@ begin
       from aclexplode((obj->>'acl')::aclitem[])
       where grantee = 'postgres'::regrole
     loop
-      execute(format('revoke all on type %s from supabase_admin', (obj->>'oid')::regtype));
       execute(format('grant %s on type %s to postgres %s', rec.privilege_type, (obj->>'oid')::regtype, case when rec.is_grantable then 'with grant option' else '' end));
     end loop;
   end loop;
@@ -577,7 +573,6 @@ begin
       from aclexplode((obj->>'acl')::aclitem[])
       where grantee = 'postgres'::regrole
     loop
-      execute(format('revoke all on function %s(%s) from supabase_admin', (obj->>'oid')::regproc, pg_get_function_identity_arguments((obj->>'oid')::regproc)));
       execute(format('grant %s on function %s(%s) to postgres %s', rec.privilege_type, (obj->>'oid')::regproc, pg_get_function_identity_arguments((obj->>'oid')::regproc), case when rec.is_grantable then 'with grant option' else '' end));
     end loop;
   end loop;
@@ -595,7 +590,6 @@ begin
       from aclexplode((obj->>'acl')::aclitem[])
       where grantee = 'postgres'::regrole
     loop
-      execute(format('revoke all on table %s from supabase_admin', (obj->>'oid')::oid::regclass));
       execute(format('grant %s on table %s to postgres %s', rec.privilege_type, (obj->>'oid')::oid::regclass, case when rec.is_grantable then 'with grant option' else '' end));
     end loop;
   end loop;