Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1ltKDC-0006SU-LB for pgsql-admin@arkaria.postgresql.org; Wed, 16 Jun 2021 01:19:22 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1ltKDB-00036d-Le for pgsql-admin@arkaria.postgresql.org; Wed, 16 Jun 2021 01:19:21 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1ltKDB-00036V-Cm for pgsql-admin@lists.postgresql.org; Wed, 16 Jun 2021 01:19:21 +0000 Received: from sss.pgh.pa.us ([66.207.139.130]) by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1ltKD9-00017K-FD for pgsql-admin@postgresql.org; Wed, 16 Jun 2021 01:19:20 +0000 Received: from sss1.sss.pgh.pa.us (localhost [127.0.0.1]) by sss.pgh.pa.us (8.15.2/8.15.2) with ESMTP id 15G1JH1J591500; Tue, 15 Jun 2021 21:19:17 -0400 From: Tom Lane To: Wells Oliver cc: "David G. Johnston" , pgsql-admin Subject: Re: Dump & restore in directory format and permissions are largely lost? In-reply-to: References: Comments: In-reply-to Wells Oliver message dated "Tue, 15 Jun 2021 18:09:21 -0700" MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <591498.1623806357.1@sss.pgh.pa.us> Date: Tue, 15 Jun 2021 21:19:17 -0400 Message-ID: <591499.1623806357@sss.pgh.pa.us> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk Wells Oliver writes: > Yes. The target and source servers have the same users and roles, which is > why their permissions being absent from the same objects on the target > where they exist in the source is very confusing to me. Did you look for errors in the log output of both pg_dump and pg_restore? > I also do a pg_restore -l -Fd on the dump file, and I don't see any GRANT > or REVOKE statements: should I expect that? They'd show up in "-l" output as ACL items. regards, tom lane