Skip to content

Commit

Permalink
Merge pull request #5926 from EnterpriseDB/release-2024-08-08b
Browse files Browse the repository at this point in the history
Release 2024-08-08b
  • Loading branch information
djw-m authored Aug 8, 2024
2 parents 61889f7 + 2d65cf2 commit 18e1b42
Show file tree
Hide file tree
Showing 42 changed files with 3,322 additions and 25 deletions.
213 changes: 213 additions & 0 deletions advocacy_docs/tools/alteruser_utility/index.mdx
Original file line number Diff line number Diff line change
@@ -0,0 +1,213 @@
---
title: "Alteruser utility"
description: "How to use the alteruser utility to alter a PostgreSQL role in your EDB Postgres Advanced Server databases"
iconName: Tools
deepToC: true
---

## Overview

The `alteruser` utility modifies an existing role in your EDB Postgres Advanced Server's clusters. It's a wrapper around the SQL command ALTER ROLE and is similar to the `createuser` utility.

By default, the `alteruser` utility sends the password to the server in plain text, allowing the server to use the password verify function of the assigned password profiles to verify the passwords. It also prompts for the old password if necessary. Use the `--help` option to see all the supported options for modifying user credentials and privileges.

## Synopsis

```
alteruser [OPTION]... [ROLENAME] [CONNSTR]
```

## Options

Provide the options as arguments to the `alteruser` command.

`-c N` or `--connection-limit=N`

Sets a maximum number of connections for a role.

`-d` or `--createdb`

Assigns the CREATE DATABASE privilege to a role, so it can create databases.

`-D` or `--no-createdb`

Removes the CREATE DATABASE privilege from a role, so it can't create databases.

`-i` or `--inherit`

Assigns permission to a role to inherit privileges of roles it's a member of.

`-I` or `--no-inherit`

Removes permissions from a role to inherit privileges of roles it's a member of.

`-l` or `--login`

Assigns the LOGIN privilege to a role, so it can log in.

`-L` or `--no-login`

Removes the LOGIN privilege from a role, so it can't log in.

`-P` or `--pwprompt`

Assigns a password to a role.

`-r` or `--createrole`

Assigns the CREATEROLE privilege to a role, so it can create, alter, drop, comment on, and change the security label for other roles.

`-R` or `--no-createrole`

Removes the CREATEROLE privilege from a role, so it can't create new roles.

`-s` or `--superuser`

Assigns the SUPERUSER privilege to a role.

`-S` or `--no-superuser`

Removes the SUPERUSER privilege from a role.

`-v` or `--valid-until=TIMESTAMP`

Sets a date and time after which the role's password is no longer valid.

`-V` or `--version`

Prints the `alteruser` version information and exits.

`--interactive`

Prompts for the missing role name and attributes if none are specified on the command line.

`--bypassrls`

Allows a role to bypass row-level security (RLS) policy.

`--no-bypassrls`

Disallows a role to bypass row-level security (RLS) policy.

`--replication`

Assigns REPLICATION privilege to a role, so it can initiate the replication.

`--no-replication`

Removes REPLICATION privilege from a role, so it can't initiate replication.

`--account=MODE`

Allows a role to change the account mode. The mode can be LOCK or UNLOCK.

`--createdblink`

Assigns the CREATE DATABASE LINK privilege to a role, so it can create database links.

`--no-createdblink`

Removes the CREATE DATABASE LINK privilege from a role, so it can't create database links.

`--createpublicdblink`

Assigns the CREATE PUBLIC DATABASE LINK privilege to a role, so it can create public database links.

`--no-createpublicdblink`

Removes the CREATE PUBLIC DATABASE LINK privilege from a role, so it can't create public database links.

`--droppublicdblink`

Assigns the DROP PUBLIC DATABASE LINK privilege to a role, so it can drop public database links.

`--no-droppublicdblink`

Removes the DROP PUBLIC DATABASE LINK privilege from a role, so it can't drop public database link.

`--encrypt-password=METHOD`

Assigns an encryption method for a password. Use this option with the `--pwprompt` option. The encryption method can be `"scram-sha-256"`, `"md5"`, `"server_encryption"`, or `"plain"` (default). If you select "server_encryption", the password encrypts using the server's `password_encryption` GUC value. If you select `"plain"`, the password isn't encrypted and is sent in plain text.

`--exemptaccesspolicy`

Exempts a role from access control (DBMS_RLS) policies.

`--no-exemptaccesspolicy`

Doesn't exempt a role from access control (DBMS_RLS) policies.

`--lock-time=TIMESTAMP`

A role's lock time.

`--passwordexpireat[=TIMESTAMP]`

A role's password expiration time. If you don't provide the timestamp value, the current timestamp is used for password expiration.

`--passwordsetat=TIMESTAMP`

A role's password setting time.

`--profile=NAME`

Assigns the profile to a role.

`--rename=ROLENAME`

Renames a role. Use the `--rename` option alone, without any other options.

`-?` or `--help`

Show help about `alteruser` arguments, and exit.


### Connection options

Provide the connection options to connect to a specific cluster where a role is residing. The connection options override the parameters from the connection string.

`-h` or `--host=HOSTNAME`

Database server host or socket directory.

`-p` or `--port=PORT`

Database server port number.

`-U` or `--username=USERNAME`

User name to connect as (not the one to alter).

`-w` or `--no-password`

Never prompt for password.

`-W` or `--password`

Force password prompt.

`--dbname=DBNAME`

Database to connect.

## CONNSTR

You can provide the database connection parameters in `CONNSTR`. It overrides the passed-in parameters with the values from the `CONNSTR`.

## Examples

This example shows how to alter a role on a localhost server running on port 5444:

```
./alteruser -h localhost -p 5444 -S -D -R joe
```

This example shows how to alter a role on the default database server in interactive mode:

```
./alteruser --interactive joe
__OUTPUT__
Shall the role be a superuser? (y/n) n
Shall the role be allowed to create databases? (y/n) n
Shall the role be allowed to create more new roles? (y/n) n
```
9 changes: 9 additions & 0 deletions advocacy_docs/tools/index.mdx
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
---
title: "Postgres tools"
navTitle: "Postgres tools"
iconName: Tools
indexCards: simple
navigation:
- edb_sqlpatch
- alteruser_utility
---
Original file line number Diff line number Diff line change
@@ -0,0 +1,16 @@
---
title: EDB Postgres Advanced Server 12.20.25 release notes
navTitle: "Version 12.20.25"
---

Released: 8 Aug 2024

EDB Postgres Advanced Server 12.20.25 includes the following enhancements and bug fixes:

| Type | Description | Addresses                |
|----------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------|
| Upstream merge | Merged with community PostgreSQL 12.20. This release includes a fix for [CVE-2024-7348](https://www.postgresql.org/support/security/CVE-2024-7348/). See the [PostgreSQL 12.20 Release Notes](https://www.postgresql.org/docs/release/12.20/) for more information. | [CVE-2024-7348](https://www.postgresql.org/support/security/CVE-2024-7348/) |
| Bug fix | Fixed an issue for EDB*Loader. Now when multiple duplicate key errors occur during the load it doesn't slow down and memory doesn't overflow. | #37017 |
| Bug fix | Fixed an issue for replication connections. Now it correctly displays the authentication failure error message. | #101591 |
| Bug fix | Fixed an issue for `ecpg`. Now it supports `do..while()` in Pro*C mode (`-C PROC`). | #35988 |
| Bug fix | Fixed an issue for `edb_dblink_oci`. Now it correctly push downs `ANY` and `ALL` operators when used with scalar array. | #36220 |
2 changes: 2 additions & 0 deletions product_docs/docs/epas/12/epas_rel_notes/index.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
navTitle: Release Notes
title: "EDB Postgres Advanced Server Release Notes"
navigation:
- epas12_20_25_rel_notes
- epas12_19_24_rel_notes
- epas12_18_23_rel_notes
- epas12_17_22_rel_notes
Expand Down Expand Up @@ -31,6 +32,7 @@ The EDB Postgres Advanced Server (Advanced Server) documentation describes the l

| Version | Release Date | Upstream Merges |
| ----------------------------------------- | ------------ | -------------------------------------------------------------- |
| [12.20.25](epas12_20_25_rel_notes.mdx) | 08 Aug 2024 | [12.20](https://www.postgresql.org/docs/12/release-12-20.html) |
| [12.19.24](epas12_19_24_rel_notes.mdx) | 09 May 2024 | [12.19](https://www.postgresql.org/docs/12/release-12-19.html) |
| [12.18.23](epas12_18_23_rel_notes.mdx) | 08 Feb 2023 | [12.18](https://www.postgresql.org/docs/12/release-12-18.html) |
| [12.17.22](epas12_17_22_rel_notes.mdx) | 09 Nov 2023 | [12.17](https://www.postgresql.org/docs/12/release-12-17.html) |
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
---
title: EDB Postgres Advanced Server 13.16.22 release notes
navTitle: "Version 13.16.22"
---

Released: 8 Aug 2024

EDB Postgres Advanced Server 13.16.22 includes the following enhancements and bug fixes:

| Type | Description | Addresses                |
|----------------|-----------------------------------------------------------------------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------|
| Upstream merge | Merged with community PostgreSQL 13.16. This release includes a fix for [CVE-2024-7348](https://www.postgresql.org/support/security/CVE-2024-7348/). See the [PostgreSQL 13.16 Release Notes](https://www.postgresql.org/docs/release/13.16/) for more information. | [CVE-2024-7348](https://www.postgresql.org/support/security/CVE-2024-7348/) |
| Bug fix | Fixed an issue for EDB*Loader. Now when multiple duplicate key errors occur during the load it doesn't slow down and memory doesn't overflow. | #37017 |
| Bug fix | Fixed an issue for replication connections. Now it correctly displays the authentication failure error message. | #101591 |
| Bug fix | Fixed an issue for `ecpg`. Now it supports `do..while()` in Pro*C mode (`-C PROC`). | #35988 |
| Bug fix | Fixed an issue for `edb_dblink_oci`. Now it correctly push downs `ANY` and `ALL` operators when used with scalar array. | #36220 |
| Bug fix | Fixed an issue for `to_number()` function. Now it correctly accepts the `"+"` sign. | #92903 |
2 changes: 2 additions & 0 deletions product_docs/docs/epas/13/epas_rel_notes/index.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
navTitle: Release Notes
title: "EDB Postgres Advanced Server Release Notes"
navigation:
- epas13_16_22_rel_notes
- epas13_15_21_rel_notes
- epas13_14_20_rel_notes
- epas13_13_19_rel_notes
Expand All @@ -24,6 +25,7 @@ The EDB Postgres Advanced Server (Advanced Server) documentation describes the l

| Version | Release Date | Upstream Merges |
|-------------------------------------|--------------|------------------------------------------------------------------------------------------------------------------------|
| [13.16.22](epas13_16_22_rel_notes) | 08 Aug 2024 | [13.16](https://www.postgresql.org/docs/release/13.16/) |
| [13.15.21](epas13_15_21_rel_notes) | 09 May 2024 | [13.15](https://www.postgresql.org/docs/release/13.15/) |
| [13.14.20](epas13_14_20_rel_notes) | 08 Feb 2024 | [13.14](https://www.postgresql.org/docs/release/13.14/) |
| [13.13.19](epas13_13_19_rel_notes) | 09 Nov 2023 | [13.13](https://www.postgresql.org/docs/release/13.13/) |
Expand Down
18 changes: 18 additions & 0 deletions product_docs/docs/epas/14/epas_rel_notes/epas14_13_0_rel_notes.mdx
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
---
title: EDB Postgres Advanced Server 14.13.0 release notes
navTitle: "Version 14.13.0"
---

Released: 8 Aug 2024

EDB Postgres Advanced Server 14.13.0 includes the following enhancements and bug fixes:

| Type | Description | Addresses                |
|----------------|-----------------------------------------------------------------------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------|
| Upstream merge | Merged with community PostgreSQL 14.13. This release includes a fix for [CVE-2024-7348](https://www.postgresql.org/support/security/CVE-2024-7348/). See the [PostgreSQL 14.13 Release Notes](https://www.postgresql.org/docs/release/14.13/) for more information. | [CVE-2024-7348](https://www.postgresql.org/support/security/CVE-2024-7348/) |
| Bug fix | Fixed an issue for EDB*Loader. Now when multiple duplicate key errors occur during the load it doesn't slow down and memory doesn't overflow. | #37017 |
| Bug fix | Fixed an issue for replication connections. Now it correctly displays the authentication failure error message. | #101591 |
| Bug fix | Fixed an issue for `ecpg`. Now it supports `do..while()` in Pro*C mode (`-C PROC`). | #35988 |
| Bug fix | Fixed an issue for `edb_dblink_oci`. Now it correctly push downs `ANY` and `ALL` operators when used with scalar array. | #36220 |
| Bug fix | Fixed an issue for `to_number()` function. Now it correctly accepts the `"+"` sign. | #92903 |
| Bug fix | Fixed an issue with incomplete transactions clean up after a crash. Now the incomplete transactions are cleaned up in reorder buffer after a crash. | #99636 |
2 changes: 2 additions & 0 deletions product_docs/docs/epas/14/epas_rel_notes/index.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
navTitle: Release notes
title: "EDB Postgres Advanced Server release notes"
navigation:
- epas14_13_0_rel_notes
- epas14_12_0_rel_notes
- epas14_11_0_rel_notes
- epas14_10_0_rel_notes
Expand All @@ -23,6 +24,7 @@ The EDB Postgres Advanced Server (EDB Postgres Advanced Server) documentation de

| Version | Release date | Upstream merges |
|-----------------------------------|--------------|--------------------------------------------------------------------------------------------------------------------------|
| [14.13.0](epas14_13_0_rel_notes) | 08 Aug 2024 | [14.13](https://www.postgresql.org/docs/14/release-14-13.html) |
| [14.12.0](epas14_12_0_rel_notes) | 09 May 2024 | [14.12](https://www.postgresql.org/docs/14/release-14-12.html) |
| [14.11.0](epas14_11_0_rel_notes) | 08 Feb 2024 | [14.11](https://www.postgresql.org/docs/14/release-14-11.html) |
| [14.10.0](epas14_10_0_rel_notes) | 09 Nov 2023 | [14.10](https://www.postgresql.org/docs/14/release-14-10.html) |
Expand Down
Loading

1 comment on commit 18e1b42

@github-actions
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please sign in to comment.