test

Author: soedirgo

ansible/files/admin_api_scripts/pg_upgrade_scripts/initiate.sh

@@ -547,6 +547,7 @@ begin
       from aclexplode((obj->>'acl')::aclitem[])
       where grantee = 'postgres'::regrole
     loop
+      execute(format('revoke all on schema %s from supabase_admin', (obj->>'oid')::regnamespace));
       execute(format('grant %s on schema %s to postgres %s', rec.privilege_type, (obj->>'oid')::regnamespace, case when rec.is_grantable then 'with grant option' else '' end));
     end loop;
   end loop;
@@ -562,6 +563,7 @@ begin
       from aclexplode((obj->>'acl')::aclitem[])
       where grantee = 'postgres'::regrole
     loop
+      execute(format('revoke all on type %s from supabase_admin', (obj->>'oid')::regtype));
       execute(format('grant %s on type %s to postgres %s', rec.privilege_type, (obj->>'oid')::regtype, case when rec.is_grantable then 'with grant option' else '' end));
     end loop;
   end loop;
@@ -577,6 +579,7 @@ begin
       from aclexplode((obj->>'acl')::aclitem[])
       where grantee = 'postgres'::regrole
     loop
+      execute(format('revoke all on function %s(%s) from supabase_admin', (obj->>'oid')::regproc, pg_get_function_identity_arguments((obj->>'oid')::regproc)));
       execute(format('grant %s on function %s(%s) to postgres %s', rec.privilege_type, (obj->>'oid')::regproc, pg_get_function_identity_arguments((obj->>'oid')::regproc), case when rec.is_grantable then 'with grant option' else '' end));
     end loop;
   end loop;
@@ -594,6 +597,7 @@ begin
       from aclexplode((obj->>'acl')::aclitem[])
       where grantee = 'postgres'::regrole
     loop
+      execute(format('revoke all on table %s from supabase_admin', (obj->>'oid')::oid::regclass));
       execute(format('grant %s on table %s to postgres %s', rec.privilege_type, (obj->>'oid')::oid::regclass, case when rec.is_grantable then 'with grant option' else '' end));
     end loop;
   end loop;