Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kpyCP-0002v9-7C for pgsql-admin@arkaria.postgresql.org; Thu, 17 Dec 2020 18:40:25 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1kpyCO-0003gl-4K for pgsql-admin@arkaria.postgresql.org; Thu, 17 Dec 2020 18:40:24 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kpyCN-0003fn-T3 for pgsql-admin@lists.postgresql.org; Thu, 17 Dec 2020 18:40:23 +0000 Received: from momjian.us ([72.94.173.45]) by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kpyCJ-0000K8-9J for pgsql-admin@lists.postgresql.org; Thu, 17 Dec 2020 18:40:22 +0000 Received: from bruce by momjian.us with local (Exim 4.92) (envelope-from ) id 1kpyCH-0001c3-6w; Thu, 17 Dec 2020 13:40:17 -0500 Date: Thu, 17 Dec 2020 13:40:17 -0500 From: Bruce Momjian To: Tom Lane Cc: Scott Ribe , Pgsql-admin Subject: Re: 12 to 13 migration, the privs error with pg_pltemplate Message-ID: <20201217184017.GA23245@momjian.us> References: <074FE83A-E924-4787-9E68-27EB9CE142B3@elevated-dev.com> <3264512.1607456932@sss.pgh.pa.us> <154608A6-0F38-4BE8-B3F4-3E3308691F91@elevated-dev.com> <2BD26D52-19B8-42CD-860D-B9AE21AF5C61@elevated-dev.com> <3632844.1607534358@sss.pgh.pa.us> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <3632844.1607534358@sss.pgh.pa.us> User-Agent: Mutt/1.10.1 (2018-07-13) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk On Wed, Dec 9, 2020 at 12:19:18PM -0500, Tom Lane wrote: > Scott Ribe writes: > > Any other suggestions? What could possibly be triggering this GRANT? > > Ah, I'm sorry, I pointed you at the wrong catalog entirely. It's > not pg_default_acl that controls this, it's pg_init_privs. I believe > what pg_dump is doing is emitting GRANT commands that replicate > the difference between pg_pltemplate's current actual privileges and > what is shown for it in pg_init_privs. So you need to make those > two things match, in whichever way is easiest. Should pg_dump or pg_upgrade be detecting and reporting these things, rather than requiring this analysis by the user? -- Bruce Momjian https://momjian.us EnterpriseDB https://enterprisedb.com The usefulness of a cup is in its emptiness, Bruce Lee