From 0c87e465783b4c7ee084af4e8f4ec6fe3166db41 Mon Sep 17 00:00:00 2001 From: Hongbo Wu Date: Fri, 21 Jun 2024 19:40:22 +0800 Subject: [PATCH] fix permission error when drop role omnivore_admin --- .../db/migrations/0183.do.alter_omnivore_admin_role.sql | 3 +-- .../db/migrations/0183.undo.alter_omnivore_admin_role.sql | 7 ++++++- 2 files changed, 7 insertions(+), 3 deletions(-) diff --git a/packages/db/migrations/0183.do.alter_omnivore_admin_role.sql b/packages/db/migrations/0183.do.alter_omnivore_admin_role.sql index 5a87699eb..ab74e309e 100755 --- a/packages/db/migrations/0183.do.alter_omnivore_admin_role.sql +++ b/packages/db/migrations/0183.do.alter_omnivore_admin_role.sql @@ -5,12 +5,11 @@ BEGIN; DROP POLICY user_admin_policy ON omnivore.user; +DROP POLICY library_item_admin_policy ON omnivore.library_item; REVOKE ALL PRIVILEGES ON ALL TABLES IN SCHEMA omnivore from omnivore_admin; REVOKE ALL PRIVILEGES ON SCHEMA omnivore from omnivore_admin; -DROP OWNED BY omnivore_admin; - DROP ROLE omnivore_admin; CREATE ROLE omnivore_admin; diff --git a/packages/db/migrations/0183.undo.alter_omnivore_admin_role.sql b/packages/db/migrations/0183.undo.alter_omnivore_admin_role.sql index 0b8c5fa6e..2299875d5 100755 --- a/packages/db/migrations/0183.undo.alter_omnivore_admin_role.sql +++ b/packages/db/migrations/0183.undo.alter_omnivore_admin_role.sql @@ -10,7 +10,7 @@ REVOKE SELECT, INSERT, UPDATE, DELETE ON omnivore.library_item FROM omnivore_adm DROP POLICY user_admin_policy ON omnivore.user; REVOKE SELECT, INSERT, UPDATE, DELETE ON omnivore.user FROM omnivore_admin; -DROP OWNED BY omnivore_admin; +REVOKE USAGE ON SCHEMA omnivore FROM omnivore_admin; DROP ROLE omnivore_admin; @@ -28,4 +28,9 @@ CREATE POLICY user_admin_policy on omnivore.user TO omnivore_admin USING (true); +CREATE POLICY library_item_admin_policy on omnivore.library_item + FOR ALL + TO omnivore_admin + USING (true); + COMMIT;