Check for USAGE (instead of MEMBER) privilege in all pg_has_role occurrences #1012
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
To work correctly Barman database user should be included in some roles ad this is checked by
pg_has_role
function.In all
pg_has_role
functionsMEMBER
privilege is checked but in Barman code noSET ROLE
is present so it better to check inpg_has_role
functionsUSAGE
privilege instead (that includesINHERIT
check).pg_has_role
function documentation: https://www.postgresql.org/docs/16/functions-info.html#id-1.5.8.32.4.4.2.2.14.1.1.1PR already discussed with @martinmarques here: EnterpriseDB/repmgr#807 (comment)