Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1qvjc6-006zfS-1h for pgsql-admin@arkaria.postgresql.org; Wed, 25 Oct 2023 19:32:22 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1qvjc3-007bp7-SY for pgsql-admin@arkaria.postgresql.org; Wed, 25 Oct 2023 19:32:19 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1qvjc2-007boz-HY for pgsql-admin@lists.postgresql.org; Wed, 25 Oct 2023 19:32:19 +0000 Received: from out2-smtp.messagingengine.com ([66.111.4.26]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1qvjby-002lyF-9z for pgsql-admin@lists.postgresql.org; Wed, 25 Oct 2023 19:32:17 +0000 Received: from compute6.internal (compute6.nyi.internal [10.202.2.47]) by mailout.nyi.internal (Postfix) with ESMTP id 446FF5C025B; Wed, 25 Oct 2023 15:32:11 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute6.internal (MEProxy); Wed, 25 Oct 2023 15:32:11 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:content-type:date:date:feedback-id:feedback-id :from:from:in-reply-to:in-reply-to:message-id:mime-version :reply-to:sender:subject:subject:to:to:x-me-proxy:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t=1698262331; x= 1698348731; bh=wSrXpS8GAAFjnKkhCJdSSovg3Yxyxit53Alau1Nw/4E=; b=q 1uOEzwKyaXXWZEB7rzjjaKOa7CSdL7V1lLZEDDE/9InFA/Cs94kGPrOCxdGIF9Wn 0XzxL8DI2pLDfSJQqN0N24EAWsiNCOuy3C7tm2ZE0IE8kEQRa3pte8wz1LuXF8D9 nLZZGwunEWPc5WYkyjwf5kig2pdD6/FDF/A1bnzDlyPl/UEcA51DplyVJ9AG+H6V KpGaeK0wvnsYeggRRQNUniORKiSYc62IwoIUCIZsGGGKml47GO7bkPm8OKP6+owc czoTgvf6esYEqGIRLkMRYqEPKZoTKqYWt9P6Lp+D13ov+qzk8nD2oMekrcQApCrI R3nOINWCFliicO8y+vMPA== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvkedrledtgddufeejucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhepfffhvfevuffkgggtugfgjgesthekredttddtjeenucfhrhhomheptehlvhgr rhhoucfjvghrrhgvrhgruceorghlvhhhvghrrhgvsegrlhhvhhdrnhhoqdhiphdrohhrgh eqnecuggftrfgrthhtvghrnhepvdektdffudfftdffffehfffhjeejhffgieeuueekjeek fffgudffhfduffffueevnecuffhomhgrihhnpegvnhhtvghrphhrihhsvggusgdrtghomh enucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpegrlhhv hhgvrhhrvgesrghlvhhhrdhnohdqihhprdhorhhg X-ME-Proxy: Feedback-ID: ia2694551:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Wed, 25 Oct 2023 15:32:10 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=alvh.no-ip.org; s=schmee; t=1698262328; bh=Xg6m4ocz9p54VFMK7/JKwxYqVEB9q1KLLcifMscP+W8=; h=Date:From:To:Cc:Subject:In-Reply-To:From; b=TxkZT7rwqFBl7fGLVKojG+tORUt12qV/5KsPBzwfg2SsWzbeCzW6BU//andIwYGdV arhvR6EROowiChA1OEX6QAMySyuKX9SF8ngdb6znmO/fwQjg+n5/z/empP/rMsTtwW hiv77Oxc8B4oD+FB3ARKRf5QKKRwVyPES0Z70SpvU2Jueqi18MGI5UFSXLdhgM4d5s 5eQBemhsOUU9+77iMQ885ccPWMCqm8ybF8TPBXQZM2iBUdcrzJEzRVXxQ7AZrzJ8ya 3s/wm+xi2JayHaJVqhj0/bPTzm6ahdpJLiuskCIyA/0y53hOoaIw6ddzFFZw+b4FT0 EJ6OvOyMsL7Tw== Received: by perhan.alvh.no-ip.org (Postfix, from userid 1000) id 48E80C9; Wed, 25 Oct 2023 21:32:08 +0200 (CEST) Date: Wed, 25 Oct 2023 21:32:08 +0200 From: Alvaro Herrera To: Tom Lane Cc: Aditya D , Ron , pgsql-admin@lists.postgresql.org Subject: Re: User/Roles, Owner, and privileges migration strategy Message-ID: <202310251932.ozy6lrpoinh2@alvherre.pgsql> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <1004361.1698256270@sss.pgh.pa.us> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On 2023-Oct-25, Tom Lane wrote: > I kind of suspect that that's going to be a dead end. If you can't > run dump and restore as superuser, it's going to be very hard to deal > with a multi-user database, unless you use --no-owner which of course > doesn't restore the multiple object ownerships. > > You might have to resort to separately dumping the objects belonging > to each user, and then running each restore as that user. In Postgres you're probably right, but I understood that this is RDS, which offers a superuser-of-sorts. It allows some alien stuff to be done. Though ... re-reading the question, I see now he's saying it may be RDS or maybe *other* DBaaS providers, so maybe it works and maybe it doesn't, depending on the specifics. -- Álvaro Herrera Breisgau, Deutschland — https://www.EnterpriseDB.com/