upstream/postgresql
1
0
Fork 0
mirror of https://github.com/postgres/postgres.git synced 2026-06-08 16:26:30 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Cleanup users and roles in graph_table_rls test

Browse source 
This test leaves behind the roles and users it creates.
002_pg_upgrade test dumps and restore the regression when
PG_TEST_EXTRA contains regress_dump_restore.  The global objects such
as users and roles are not dumped by pg_dump.  But it still dumps the
policies associated with users, and commands to set the ownership.
Restoring these policies and the ownerships fails since the users and
roles do not exist.  To fix this failure we could use --no-owner, but
it does not exclude the policy objects associated with users.  Hence
drop the users, roles and policies that depend upon them at the end of
the test.

Author: Ashutosh Bapat <ashutosh.bapat.oss@gmail.com>
Reported-by: Peter Eisentraut <peter@eisentraut.org>
Reviewed-by: Tom Lane <tgl@sss.pgh.pa.us>
Discussion: https://www.postgresql.org/message-id/flat/a855795d-e697-4fa5-8698-d20122126567@eisentraut.org
This commit is contained in:
Peter Eisentraut 2026-03-20 10:54:35 +01:00
parent 57ee397953
commit 040a56be4b
2 changed files with 32 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
src/test/regress/expected/graph_table_rls.out
View file

@ -771,4 +771,19 @@ ERROR: query would be affected by row-level security policy for table "document
HINT: To disable the policy for the table's owner, use ALTER TABLE NO FORCE ROW LEVEL SECURITY.
-- Clean up
DEALLOCATE graph_rls_query;
-- leave objects behind for pg_upgrade/pg_dump tests
-- leave as many objects behind for pg_upgrade/pg_dump tests as possible. The
-- pg_dump test only dumps the regression database, not the global objects like
-- users and roles. Reassign ownership of all objects to superuser and drop
-- users and roles created in this test. Policies can not be reassigned, so drop
-- them explicitly.
RESET SESSION AUTHORIZATION;
REASSIGN OWNED BY regress_graph_rls_alice TO current_user;
DROP USER regress_graph_rls_alice;
DROP USER regress_graph_rls_bob;
DROP USER regress_graph_rls_carol;
DROP USER regress_graph_rls_dave;
DROP USER regress_graph_rls_exempt_user;
DROP POLICY p3 ON document_people;
DROP POLICY p4 ON document_people;
DROP ROLE regress_graph_rls_group1;
DROP ROLE regress_graph_rls_group2;

17
src/test/regress/sql/graph_table_rls.sql
View file

@ -360,4 +360,19 @@ EXECUTE graph_rls_query; -- error
-- Clean up
DEALLOCATE graph_rls_query;
-- leave objects behind for pg_upgrade/pg_dump tests
-- leave as many objects behind for pg_upgrade/pg_dump tests as possible. The
-- pg_dump test only dumps the regression database, not the global objects like
-- users and roles. Reassign ownership of all objects to superuser and drop
-- users and roles created in this test. Policies can not be reassigned, so drop
-- them explicitly.
RESET SESSION AUTHORIZATION;
REASSIGN OWNED BY regress_graph_rls_alice TO current_user;
DROP USER regress_graph_rls_alice;
DROP USER regress_graph_rls_bob;
DROP USER regress_graph_rls_carol;
DROP USER regress_graph_rls_dave;
DROP USER regress_graph_rls_exempt_user;
DROP POLICY p3 ON document_people;
DROP POLICY p4 ON document_people;
DROP ROLE regress_graph_rls_group1;
DROP ROLE regress_graph_rls_group2;