From 128a99d3368aa61c1e4fef3373227f7ab644f2b8 Mon Sep 17 00:00:00 2001 From: Stephen Finucane Date: Sat, 28 Nov 2020 17:09:45 +0000 Subject: [PATCH] lib: Add update permissions to 'nobody' postgres user This user needs the ability to change some attributes of 'Patch' and 'CoverLetter' instances that are stored in the 'patchwork_submission' table, since both are are concrete subclasses of 'Submission'. Stable-only since the 'Submission model has been removed on 'master'. Signed-off-by: Stephen Finucane Suggested-by: Ali Alnubani Closes: #364 Stable-Only --- lib/sql/grant-all.postgres.sql | 2 ++ 1 file changed, 2 insertions(+) diff --git a/lib/sql/grant-all.postgres.sql b/lib/sql/grant-all.postgres.sql index 56a24864..48acf1b0 100644 --- a/lib/sql/grant-all.postgres.sql +++ b/lib/sql/grant-all.postgres.sql @@ -73,6 +73,8 @@ GRANT INSERT, SELECT ON patchwork_coverletter, patchwork_event, patchwork_seriesreference, +TO "nobody"; +GRANT INSERT, SELECT, UPDATE ON patchwork_submission TO "nobody"; GRANT INSERT, SELECT, UPDATE, DELETE ON -- 2.47.3