-
Notifications
You must be signed in to change notification settings - Fork 4.1k
sql: fix privileges for multi-region ALTER DATABASE commands #62252
Copy link
Copy link
Closed
Labels
C-bugCode not up to spec/doc, specs & docs deemed correct. Solution expected to change code/behavior.Code not up to spec/doc, specs & docs deemed correct. Solution expected to change code/behavior.
Description
Describe the problem
Currently, a user can only use a multi-region flavour ALTER DATABASE command if they have the CREAEDB role option. Interestingly, this means a user who has ownership over a dataabse may not be able to alter multi-regon functionality.
Also, the requirement of CREATEDB role option is questionable -- Postgres only requires this in very specific scenarios and it is unclear to me if this extension falls under those. Instead, the proposal for multi-region specific ALTER DATABASE commands is as follows:
- User must be an admin user
- Or the user must be an owner of the database
- Or the user must have the
CREATEprivilege on the database.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
C-bugCode not up to spec/doc, specs & docs deemed correct. Solution expected to change code/behavior.Code not up to spec/doc, specs & docs deemed correct. Solution expected to change code/behavior.