Skip to content

sql: fix privileges for multi-region ALTER DATABASE commands #62252

@arulajmani

Description

@arulajmani

Describe the problem

Currently, a user can only use a multi-region flavour ALTER DATABASE command if they have the CREAEDB role option. Interestingly, this means a user who has ownership over a dataabse may not be able to alter multi-regon functionality.

Also, the requirement of CREATEDB role option is questionable -- Postgres only requires this in very specific scenarios and it is unclear to me if this extension falls under those. Instead, the proposal for multi-region specific ALTER DATABASE commands is as follows:

  • User must be an admin user
  • Or the user must be an owner of the database
  • Or the user must have the CREATE privilege on the database.

Metadata

Metadata

Assignees

Labels

C-bugCode not up to spec/doc, specs & docs deemed correct. Solution expected to change code/behavior.

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions