Feedback-ID: i76984098:Fastmail
Message-ID: <8fec88b9-355f-487d-95ad-103af2229fde@aklaver.com>
Date: Sat, 5 Oct 2024 13:11:56 -0700
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: grant connect to all databases
To: Matt Zagrabelny <mzagrabe@d.umn.edu>
Cc: "David G. Johnston" <david.g.johnston@gmail.com>,
 "pgsql-generallists.postgresql.org" <pgsql-general@lists.postgresql.org>
References: <CAOLfK3Vj-PFBJi28y1170ZP3dGeW2qpG_8_9CbaJWvEgXQ8-jQ@mail.gmail.com>
 <CAKFQuwYG8uQhN50MgcF1seg8+dwvgTMFez=wA3Rg2rosob78cg@mail.gmail.com>
 <CAOLfK3XOHnyWsLv_CdFAegWg1FgM3AK3WsO_r+rXSNjp8TQXcg@mail.gmail.com>
 <cebb02fa-5487-4c06-8527-9c8ba29c13a9@aklaver.com>
 <CAOLfK3V10fBPAhXHLJ6hyZ41BVZQTk=Bbq7MODX30O_REPvQrg@mail.gmail.com>
 <0c089041-d4eb-4bf4-bfcb-6451224190c9@aklaver.com>
 <CAOLfK3W6K-r0+v7Sa9D6684hM3Jg0UxtZ4iOwZiJsteBj0rfoQ@mail.gmail.com>
Content-Language: en-US
From: Adrian Klaver <adrian.klaver@aklaver.com>
In-Reply-To: <CAOLfK3W6K-r0+v7Sa9D6684hM3Jg0UxtZ4iOwZiJsteBj0rfoQ@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Archived-At: <https://www.postgresql.org/message-id/8fec88b9-355f-487d-95ad-103af2229fde%40aklaver.com>
Precedence: bulk

On 10/5/24 11:24, Matt Zagrabelny wrote:
> 

> 
> Nope. I create the role (via puppet) and then add the GRANT 
> pg_read_all_data TO (via puppet).
> 

> What is \drgS? I don't believe I have that.

That is available in Postgres 16+, you must running be in an instance of 
Postgres before that.


>   'CREATE ROLE "alice" ENCRYPTED PASSWORD \'$NEWPGPASSWD\' LOGIN 
> NOCREATEROLE NOCREATEDB NOSUPERUSER  CONNECTION LIMIT -1'
> GRANT pg_read_all_data TO alice;
> 

>   ...but I still cannot connect:
> 
> $ psql -d test -U alice
> psql: error: connection to server on socket 
> "/var/run/postgresql/.s.PGSQL.5432" failed: FATAL:  permission denied 
> for database "test"
> DETAIL:  User does not have CONNECT privilege.

Something is going on in the background.

What version of Postgres?

Where did you install it from or where are you running it?

> 
> Thanks for the help!
> 
> -m

-- 
Adrian Klaver
adrian.klaver@aklaver.com