]> git.ipfire.org Git - thirdparty/patchwork.git/commitdiff
lib/sql: fix permissions for v2.0.0 on postgres
authorJeremy Kerr <jk@ozlabs.org>
Mon, 28 Aug 2017 11:39:18 +0000 (19:39 +0800)
committerStephen Finucane <stephen@that.guru>
Thu, 31 Aug 2017 08:44:09 +0000 (09:44 +0100)
Some tables are no longer present, and others that are used by the web
interface and mail parser need access permissions added.

This change was required to get patchwork going on patchwork.ozlabs.org;
there may be other permissions required, that we haven't hit yet. So,
some review would be good here.

Also: it's unlikely that we need DELETE for the mail parser, but I'm not
confident enough to remove that at the moment.

Signed-off-by: Jeremy Kerr <jk@ozlabs.org>
Reviewed-by: Stephen Finucane <stephen@that.guru>
(cherry picked from commit 234bc7c316c555a432f678a75b25095c643d7ba1)

lib/sql/grant-all.postgres.sql

index 405ba44617cd28a91b43fd388dc0f798f2b4affd..c709866347d19e30a24c7c9ef97b5313cbd82ffc 100644 (file)
@@ -12,6 +12,7 @@ GRANT SELECT, UPDATE, INSERT, DELETE ON
        auth_group,
        auth_user_user_permissions,
        auth_permission,
+       authtoken_token,
        patchwork_emailconfirmation,
        patchwork_state,
        patchwork_comment,
@@ -47,9 +48,7 @@ GRANT SELECT, UPDATE ON
        patchwork_bundle_id_seq,
        patchwork_bundlepatch_id_seq,
        patchwork_comment_id_seq,
-       patchwork_submission_id_seq,
        patchwork_patch_id_seq,
-       patchwork_coverletter_id_seq,
        patchwork_series_id_seq,
        patchwork_seriespatch_id_seq,
        patchwork_seriesreference_id_seq,
@@ -69,16 +68,17 @@ TO "www-data";
 -- cover letters) and series
 GRANT INSERT, SELECT ON
        patchwork_submission,
-       patchwork_patch,
        patchwork_coverletter,
-       patchwork_series,
        patchwork_seriespatch,
        patchwork_seriesreference,
        patchwork_comment,
-       patchwork_person
+       patchwork_event
 TO "nobody";
 GRANT INSERT, SELECT, UPDATE, DELETE ON
-       patchwork_patchtag
+       patchwork_patchtag,
+       patchwork_patch,
+       patchwork_series,
+       patchwork_person
 TO "nobody";
 GRANT SELECT ON
        patchwork_project,
@@ -87,15 +87,14 @@ GRANT SELECT ON
        patchwork_delegationrule
 TO "nobody";
 GRANT UPDATE, SELECT ON
-       patchwork_submission_id_seq,
        patchwork_patch_id_seq,
-       patchwork_coverletter_id_seq,
        patchwork_series_id_seq,
        patchwork_seriespatch_id_seq,
        patchwork_seriesreference_id_seq,
        patchwork_person_id_seq,
        patchwork_comment_id_seq,
-       patchwork_patchtag_id_seq
+       patchwork_patchtag_id_seq,
+       patchwork_event_id_seq
 TO "nobody";
 
 COMMIT;