Skip to content

Conversation

soedirgo
Copy link
Member

@soedirgo soedirgo commented Sep 18, 2024

pgsodium drops decrypted_* views when we run alter table ... owner to ..., making the list of relations stale. This causes some grants to fail because these views no longer exist when the grants are run.

  • Sanity tested on stg:
CREATE TABLE public.users (
	id bigserial primary key,
	secret text);

select * from pgsodium.create_key();

SECURITY LABEL FOR pgsodium	ON COLUMN public.users.secret
  IS 'ENCRYPT WITH KEY ID <the key>';

@soedirgo soedirgo marked this pull request as ready for review September 18, 2024 12:34
@soedirgo soedirgo requested a review from a team as a code owner September 18, 2024 12:34
@soedirgo soedirgo merged commit 96b76e4 into develop Sep 18, 2024
8 checks passed
@soedirgo soedirgo deleted the fix/disable-pgsodium-evt-when-swapping-owners branch September 18, 2024 12:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants