From: Stephen Finucane <stephen@that.guru>
Date: Sat, 28 Nov 2020 17:09:45 +0000 (+0000)
Subject: lib: Add update permissions to 'nobody' postgres user
X-Git-Tag: v2.2.3~8
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=128a99d3368aa61c1e4fef3373227f7ab644f2b8;p=thirdparty%2Fpatchwork.git

lib: Add update permissions to 'nobody' postgres user

This user needs the ability to change some attributes of 'Patch' and
'CoverLetter' instances that are stored in the 'patchwork_submission'
table, since both are are concrete subclasses of 'Submission'.

Stable-only since the 'Submission model has been removed on 'master'.

Signed-off-by: Stephen Finucane <stephen@that.guru>
Suggested-by: Ali Alnubani <alialnu@mellanox.com>
Closes: #364
Stable-Only
---

diff --git a/lib/sql/grant-all.postgres.sql b/lib/sql/grant-all.postgres.sql
index 56a24864..48acf1b0 100644
--- a/lib/sql/grant-all.postgres.sql
+++ b/lib/sql/grant-all.postgres.sql
@@ -73,6 +73,8 @@ GRANT INSERT, SELECT ON
 	patchwork_coverletter,
 	patchwork_event,
 	patchwork_seriesreference,
+TO "nobody";
+GRANT INSERT, SELECT, UPDATE ON
 	patchwork_submission
 TO "nobody";
 GRANT INSERT, SELECT, UPDATE, DELETE ON