public inbox for [email protected]  

help / color / mirror / Atom feed

From: Dominique Devienne <[email protected]>
To: Tom Lane <[email protected]>
Cc: [email protected]
Subject: Re: Switching to NOINHERIT user triggers #XX000 error
Date: Tue, 5 Nov 2024 19:21:35 +0100
Message-ID: <CAFCRh-9TeQ=tWiMDKmSZBW3JxY60Nn6Mf4AnWohixKQFOk7+TA@mail.gmail.com> (raw)
In-Reply-To: <[email protected]>
References: <CAFCRh-9byA_kmskbL5duYsjqZG3N78KuvY6TkiT3KuRo27=4QQ@mail.gmail.com>
	<[email protected]>

On Tue, Nov 5, 2024 at 6:42 PM Tom Lane <[email protected]> wrote:
> Dominique Devienne <[email protected]> writes:
> > On v16 and v17 though, it works with INHERIT, but with NOINHERIT, I get:
> > GRANT "...:USER" TO "ddevienne" #XX000: ERROR:  no possible grantors
> > Any clue to what this means, so I can start looking in the right place?
>
> \errverbose in psql would help you locate what part of the code
> is throwing that.  (Or if triggering it from psql is not convenient,
> set log_error_verbosity = verbose and find the info in the postmaster
> log.)
>
> This is probably a bug, at least to the extent that we don't like
> XX000 errors to be easily reachable, so please let us know what
> you find out.

Hi Tom.

Finding where the error is thrown is easy, it's when I'm doing that grant.
But the code creates two larguish schemas before that and several ROLEs,
so it's not easy to share.

I trapped the error in the code, and here's the details

ERROR:  XX000: no possible grantors
LOCATION:  check_role_grantor, user.c:2229

I used PQresultVerboseErrorMessage().
Tell me if you need some other error field
This is against a 17.0 server, for the line number above.

If I shared (privately) a libpq client-side trace with you Tom, would
that help you?

This particular test, I could redesign to work-around this issue probably.
But this is not the only tests that fails with a NOINHERIT user on v16+,
and I haven't tracked down all the reasons yet...

PS: I can't easily get server-side logs

view thread (3+ messages)  latest in thread

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected], [email protected]
  Subject: Re: Switching to NOINHERIT user triggers #XX000 error
  In-Reply-To: <CAFCRh-9TeQ=tWiMDKmSZBW3JxY60Nn6Mf4AnWohixKQFOk7+TA@mail.gmail.com>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox