Re: pg_restore and permissions - Mailing list pgsql-admin

From Tom Lane
Subject Re: pg_restore and permissions
Date
Msg-id 3181.1019755236@sss.pgh.pa.us
Whole thread Raw
In response to Re: pg_restore and permissions  (Bruce Momjian <pgman@candle.pha.pa.us>)
Responses Re: pg_restore and permissions  (Florian Weimer <Weimer@CERT.Uni-Stuttgart.DE>)
Re: pg_restore and permissions  (Bruce Momjian <pgman@candle.pha.pa.us>)
List pgsql-admin
Bruce Momjian <pgman@candle.pha.pa.us> writes:
> That should work.

No, it won't because the pg_dumpall script will try to connect as each
user who owns objects in the database.  With ident authorization in
force, the DB rejects these connection requests as falsified.

SET SESSION AUTHORIZATION should have been used instead, but I doubt
Florian has any convenient way to re-do the dump file with that option.

I do not think there is any way to restore such scripts except by
temporarily suspending auth checking for local connections.  (If you
feel too paranoid to do that, you might consider tightening access
permissions on the socket file instead.)

            regards, tom lane

pgsql-admin by date:

Previous
From: dalgoda@ix.netcom.com (Mike Castle)
Date:
Subject: Re: Hardware needed for 15,000,000 record DB?
Next
From: Florian Weimer
Date:
Subject: Re: pg_restore and permissions