[PATCH 2/2] lib/sql: fix permissions for v2.0.0 on postgres

Jeremy Kerr jk at ozlabs.org
Mon Aug 28 21:39:18 AEST 2017


Some tables are no longer present, and others that are used by the web
interface and mail parser need access permissions added.

This change was required to get patchwork going on patchwork.ozlabs.org;
there may be other permissions required, that we haven't hit yet. So,
some review would be good here.

Also: it's unlikely that we need DELETE for the mail parser, but I'm not
confident enough to remove that at the moment.

Signed-off-by: Jeremy Kerr <jk at ozlabs.org>
---
 lib/sql/grant-all.postgres.sql | 17 ++++++++---------
 1 file changed, 8 insertions(+), 9 deletions(-)

diff --git a/lib/sql/grant-all.postgres.sql b/lib/sql/grant-all.postgres.sql
index 405ba44..c709866 100644
--- a/lib/sql/grant-all.postgres.sql
+++ b/lib/sql/grant-all.postgres.sql
@@ -12,6 +12,7 @@ GRANT SELECT, UPDATE, INSERT, DELETE ON
 	auth_group,
 	auth_user_user_permissions,
 	auth_permission,
+	authtoken_token,
 	patchwork_emailconfirmation,
 	patchwork_state,
 	patchwork_comment,
@@ -47,9 +48,7 @@ GRANT SELECT, UPDATE ON
 	patchwork_bundle_id_seq,
 	patchwork_bundlepatch_id_seq,
 	patchwork_comment_id_seq,
-	patchwork_submission_id_seq,
 	patchwork_patch_id_seq,
-	patchwork_coverletter_id_seq,
 	patchwork_series_id_seq,
 	patchwork_seriespatch_id_seq,
 	patchwork_seriesreference_id_seq,
@@ -69,16 +68,17 @@ TO "www-data";
 -- cover letters) and series
 GRANT INSERT, SELECT ON
 	patchwork_submission,
-	patchwork_patch,
 	patchwork_coverletter,
-	patchwork_series,
 	patchwork_seriespatch,
 	patchwork_seriesreference,
 	patchwork_comment,
-	patchwork_person
+	patchwork_event
 TO "nobody";
 GRANT INSERT, SELECT, UPDATE, DELETE ON
-	patchwork_patchtag
+	patchwork_patchtag,
+	patchwork_patch,
+	patchwork_series,
+	patchwork_person
 TO "nobody";
 GRANT SELECT ON
 	patchwork_project,
@@ -87,15 +87,14 @@ GRANT SELECT ON
 	patchwork_delegationrule
 TO "nobody";
 GRANT UPDATE, SELECT ON
-	patchwork_submission_id_seq,
 	patchwork_patch_id_seq,
-	patchwork_coverletter_id_seq,
 	patchwork_series_id_seq,
 	patchwork_seriespatch_id_seq,
 	patchwork_seriesreference_id_seq,
 	patchwork_person_id_seq,
 	patchwork_comment_id_seq,
-	patchwork_patchtag_id_seq
+	patchwork_patchtag_id_seq,
+	patchwork_event_id_seq
 TO "nobody";
 
 COMMIT;
-- 
2.7.4



More information about the Patchwork mailing list