Re: BUG #18411: Unable to create database with owner on AWS RDS - Mailing list pgsql-bugs

From Andrey Lizenko
Subject Re: BUG #18411: Unable to create database with owner on AWS RDS
Date
Msg-id CADKuZZBYUh_tyMgDBwDF=WAu+T5uGX4QtNFS3EnuFao9qbEVgQ@mail.gmail.com
Whole thread Raw
In response to Re: BUG #18411: Unable to create database with owner on AWS RDS  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: BUG #18411: Unable to create database with owner on AWS RDS  ("David G. Johnston" <david.g.johnston@gmail.com>)
List pgsql-bugs
AWS uses role rdsadmin for tasks like this with limited default permissions for other roles.

On Wed, 27 Mar 2024 at 22:01, Tom Lane <tgl@sss.pgh.pa.us> wrote:
PG Bug reporting form <noreply@postgresql.org> writes:
> Using the postgres user on AWS RDS, execution of

> CREATE USER my_user WITH PASSWORD 'my-user-password';
> CREATE DATABASE my_database WITH OWNER=my_user;

> Results in an error:

> ERROR:  must be able to SET ROLE "my_user"
> SQL state: 42501

> However, the following succeeds
> CREATE USER my_user WITH PASSWORD 'my-user-password';
> CREATE DATABASE my_database;
> ALTER DATABASE my_database OWNER TO my_user;

> Is this intended behaviour or am I taking advantage of a bug by creating the
> database and then setting the OWNER using ALTER DATABASE?

Both things fail for me:

regression=# create user admin with createrole createdb;
CREATE ROLE
regression=# \c - admin
You are now connected to database "regression" as user "admin".
regression=> CREATE USER my_user WITH PASSWORD 'my-user-password';
CREATE ROLE
regression=> CREATE DATABASE my_database WITH OWNER=my_user;
ERROR:  must be able to SET ROLE "my_user"
regression=> CREATE DATABASE my_database;
CREATE DATABASE
regression=> ALTER DATABASE my_database OWNER TO my_user;
ERROR:  must be able to SET ROLE "my_user"

I suggest taking this up with AWS.

                        regards, tom lane




--
Regards, Andrei Lizenko

pgsql-bugs by date:

Previous
From: Tom Lane
Date:
Subject: Re: BUG #18411: Unable to create database with owner on AWS RDS
Next
From: "David G. Johnston"
Date:
Subject: Re: BUG #18411: Unable to create database with owner on AWS RDS