Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kn3LY-0000E6-QR for pgsql-admin@arkaria.postgresql.org; Wed, 09 Dec 2020 17:33:48 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1kn3LW-0003Z1-Sp for pgsql-admin@arkaria.postgresql.org; Wed, 09 Dec 2020 17:33:46 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kn3LW-0003Yt-LN for pgsql-admin@lists.postgresql.org; Wed, 09 Dec 2020 17:33:46 +0000 Received: from mailout.easymail.ca ([64.68.200.34]) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kn3LS-0001gj-5q for pgsql-admin@lists.postgresql.org; Wed, 09 Dec 2020 17:33:46 +0000 Received: from localhost (localhost [127.0.0.1]) by mailout.easymail.ca (Postfix) with ESMTP id DC80EA21DF; Wed, 9 Dec 2020 17:33:38 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at emo05-pco.easydns.vpn Received: from mailout.easymail.ca ([127.0.0.1]) by localhost (emo05-pco.easydns.vpn [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YXId2dwj4vU1; Wed, 9 Dec 2020 17:33:38 +0000 (UTC) Received: from [192.168.2.127] (unknown [4.28.96.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mailout.easymail.ca (Postfix) with ESMTPSA id 2275FA0EE0; Wed, 9 Dec 2020 17:33:36 +0000 (UTC) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\)) Subject: Re: 12 to 13 migration, the privs error with pg_pltemplate From: Scott Ribe In-Reply-To: <3632844.1607534358@sss.pgh.pa.us> Date: Wed, 9 Dec 2020 10:33:31 -0700 Cc: Pgsql-admin Content-Transfer-Encoding: quoted-printable Message-Id: <68634B7E-3AD0-42A3-9A2D-EC3988E755E4@elevated-dev.com> References: <074FE83A-E924-4787-9E68-27EB9CE142B3@elevated-dev.com> <3264512.1607456932@sss.pgh.pa.us> <154608A6-0F38-4BE8-B3F4-3E3308691F91@elevated-dev.com> <2BD26D52-19B8-42CD-860D-B9AE21AF5C61@elevated-dev.com> <3632844.1607534358@sss.pgh.pa.us> To: Tom Lane X-Mailer: Apple Mail (2.3608.120.23.2.4) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk > On Dec 9, 2020, at 10:19 AM, Tom Lane wrote: >=20 > Scott Ribe writes: >> Any other suggestions? What could possibly be triggering this GRANT? >=20 > Ah, I'm sorry, I pointed you at the wrong catalog entirely. It's > not pg_default_acl that controls this, it's pg_init_privs. I believe > what pg_dump is doing is emitting GRANT commands that replicate > the difference between pg_pltemplate's current actual privileges and > what is shown for it in pg_init_privs. So you need to make those > two things match, in whichever way is easiest. OK, now *THAT* turned up a lot of suspicious entries. It will be a bit = before I can try straightening that out. But there's a lot of tables in = pg_catalog that have privs listed for the user in question.