Feedback-ID: ia2694551:Fastmail
Date: Wed, 27 Sep 2023 10:06:17 +0200
From: Alvaro Herrera <alvherre@alvh.no-ip.org>
To: Zhaoxun Yan <yan.zhaoxun@gmail.com>
Cc: Pgsql-admin <pgsql-admin@lists.postgresql.org>
Subject: Re: pg_rewind: ERROR: could not fetch remote file
 "global/pg_control": ERROR: permission denied
Message-ID: <202309270806.qunez36qtlrp@alvherre.pgsql>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: 
 <CADEX6_UgD3KFEfFwDr0DJauqGDtqja9ELLV_Ny8OWyVZBRL9RQ@mail.gmail.com>
Archived-At: 
 <https://www.postgresql.org/message-id/202309270806.qunez36qtlrp%40alvherre.pgsql>
Precedence: bulk

On 2023-Sep-26, Zhaoxun Yan wrote:

> Actually I have grant function pg_read_binary_file's execution right to the
> user rep, and here are the setup for this role:
> 
> CREATE EXTENSION repmgr;
>  GRANT pg_checkpoint TO rep;
>  GRANT pg_read_all_stats TO rep;
> GRANT EXECUTE ON function pg_catalog.pg_ls_dir(text, boolean, boolean) TO rep;
> GRANT EXECUTE ON function pg_catalog.pg_stat_file(text, boolean) TO rep;
> GRANT EXECUTE ON function pg_catalog.pg_read_binary_file(text) TO rep;
> GRANT EXECUTE ON function pg_catalog.pg_read_binary_file(text, bigint,
> bigint, boolean

Maybe you did this in the wrong database?  Keep in mind that function
privileges are per database.

-- 
Álvaro Herrera         PostgreSQL Developer  —  https://www.EnterpriseDB.com/
"People get annoyed when you try to debug them."  (Larry Wall)