feat(public-catalog): add GRANT USAGE on catalog, attribute, tenant schemas and SELECT on tables to public_catalog_updater_user in prod #354
+15
−0
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
micheledellipaoli-pagopa
requested review from
beetlecrunch,
galales,
micdes-pagopa and
paolomanca-pagopa
as code owners
micheledellipaoli-pagopa
changed the title
| V1.2__Grant_Select_to_PublicCatalogUpdater.sql: |- | ||
| GRANT USAGE ON SCHEMA "${NAMESPACE}_catalog" to "public_catalog_updater_user"; | ||
| GRANT SELECT ON TABLE "${NAMESPACE}_catalog".eservice TO "public_catalog_updater_user"; |
Contributor
There was a problem hiding this comment.
Sure about to give this granular permissions on specific tables?
A join with another table is enough to cause a permission error.
Otherwise you can set:
GRANT SELECT ON ALL TABLES IN SCHEMA "${NAMESPACE}_catalog".eservice TO "public_catalog_updater_user";
Same for other migration files
Contributor
There was a problem hiding this comment.
We opted to be as granular as possible with this user since it will copy data from the "private" catalog to the public catalog
paolomanca-pagopa
approved these changes
Oct 28, 2025
galales
approved these changes
Nov 3, 2025
Contributor
|
replaced by #435 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
No description provided.