Re: [pg_dump] not dumping some default privileges

Feike Steenbergen <feikesteenbergen@gmail.com>

From: Feike Steenbergen <feikesteenbergen@gmail.com>
To: Alvaro Herrera <alvherre@2ndquadrant.com>
Cc: Reinier Haasjes <Reinier.Haasjes@adyen.com>, PostgreSQL mailing lists <pgsql-bugs@postgresql.org>
Date: 2017-10-23T13:16:40Z
Lists: pgsql-bugs
On 23 October 2017 at 14:54, Alvaro Herrera <alvherre@2ndquadrant.com>
wrote:
>
> Reinier Haasjes wrote:
> > Hi,
> >
> > I noticed that pg_dump since 9.6 is missing some default privileges
> Hmm, I can confirm that 9.6 seems to have this problem while 9.5 does
> not seem to have it.  Must have been broken at some point during the
> extensive pg_dump patches in 9.6 ...  I'll give this a look.

in buildACLQueries there is a filter to exclude those acl's that match the
pg_init_privs or default pg_catalog.acldefault for that role.

If I run the create_database.sql with a slightly altered GRANT section,
pg_dump does return the actual DEFAULT PRIVILEGES for that role, these
don't match the defaults.

-ALTER DEFAULT PRIVILEGES FOR ROLE bug IN SCHEMA public GRANT
SELECT,INSERT,UPDATE,DELETE,TRUNCATE,REFERENCES,TRIGGER ON TABLES TO bug;
+ALTER DEFAULT PRIVILEGES FOR ROLE bug IN SCHEMA public GRANT
SELECT,INSERT,UPDATE,DELETE,TRUNCATE,TRIGGER ON TABLES TO bug;

regards,

Feike