35 Commits (da39fd1625e58a2ea228065708eb66e65c0e75ab)

Author	SHA1	Message	Date
Will Thames	47cb92f74f	Ensure TEMP privilege gets removed when expanding ALL. ... ALL gets expanded to the list of VALID_PRIVS which includes TEMPORARY and TEMP The code that replaced TEMP with TEMPORARY didn't work with the expansion	9 years ago
Will Thames	2a0f6c1cb3	Correct handling of empty role_attr_flags ... role_attr_flags is the empty string by default, not None.	9 years ago
ToBeReplaced	5e82f7e11e	Make ALL_IN_SCHEMA for tables affect views ... ALL TABLES is considered to include views, so we must check for reltypes 'r' and 'v', not just 'r'. This bug was introduced due to using a custom, backwards-compatible version of "ALL TABLES IN SCHEMA".	10 years ago
Greg DeKoenigsberg	2a5f0bde87	Proper author info for all remaining modules	10 years ago
Toshio Kuratomi	c700993dd5	Fix a problem introduced with #1101 and optimize privilege handling ... * If a db user belonged to a role which had a privilege, the user would not have the privilege added as the role gave the appearance that the user already had it. Fixed to always check the privileges specific to the user. * Make fewer db queries to determine if privileges need to be changed and change them (was four for each privilege. Now two for each object that has a set of privileges changed).	10 years ago
Will Thames	167e7c2b81	Perform privilege grants/revokes only when required ... Use `has_table_privileges` and `has_database_privileges` to test whether a user already has a privilege before granting it, or whether a user doesn't have a privilege before revoking it.	10 years ago
Toshio Kuratomi	c9b17136e4	Fix a problem introduced with #1101 and optimize privilege handling ... * If a db user belonged to a role which had a privilege, the user would not have the privilege added as the role gave the appearance that the user already had it. Fixed to always check the privileges specific to the user. * Make fewer db queries to determine if privileges need to be changed and change them (was four for each privilege. Now two for each object that has a set of privileges changed).	10 years ago
Toshio Kuratomi	7dd9f57e16	Fix splitting of role_attrs	10 years ago
Will Thames	c956c65731	Usage is not a valid database or table privilege ... Remove `USAGE` from the `VALID_PRIVS` dict for both database and table because it is not a valid privilege for either (and breaks the implementation of `has_table_privilege` and `has_database_privilege` See http://www.postgresql.org/docs/9.0/static/sql-grant.html	10 years ago
Will Thames	7d66da35a7	Perform privilege grants/revokes only when required ... Use `has_table_privileges` and `has_database_privileges` to test whether a user already has a privilege before granting it, or whether a user doesn't have a privilege before revoking it.	10 years ago
Will Thames	b4515c8909	Update postgresql users only when necessary ... For read-only databases, users should not change when no changes are required. Don't issue ALTER ROLE when role attribute flags, users password or expiry time is not changing. In certain cases (hashed passwords in the DB, but the password argument is not hashed) passlib.hash is required to avoid running ALTER ROLE.	10 years ago
tedder	bffd137edd	code review fixes per #957	10 years ago
tedder	472331a53b	skip password changes so pg_authid isn't needed ... Some places ([AWS RDS](https://forums.aws.amazon.com/thread.jspa?threadID=151248)) don't have, or don't allow, access to the `pg_authid` table. The only reason that is necessary is to check for a password change. This flag is a workaround so passwords can only be set at creation time. It isn't as elegant as changing the password down the line, but it fixes the longstanding issue #297 that prevented this from being useful on AWS RDS.	10 years ago
Brian Coca	02af66d232	Merge pull request #559 from mjschultz/postgres-db-fix ... Build the db connection on `"postgres"` instead of `"template1"`	10 years ago
Johannes Steger	34aa98a99c	Fix function identifier quoting	10 years ago
Michael J. Schultz	b894bc2b77	Build the db connection on `"postgres"` instead of `"template1"` ... According to the postgresql docs[1], you should not have a connection with `"template1"` when copying multiple databases. [1]: http://www.postgresql.org/docs/9.1/static/manage-ag-templatedbs.html	10 years ago
Toshio Kuratomi	b0c94cd6f6	Merge pull request #281 from kustodian/postgresql_db_fix_for_python_24_checkmode ... Fixed postgresql_db failing on Python 2.4 with --check	10 years ago
kustodian	07b98c45df	Fixed postgresql_db failing on Python 2.4 with --check ... This reverts commit 81cbdb6c8c and adds ignoring of the SystemExit exception because of Python 2.4.	10 years ago
Toshio Kuratomi	b766390ae2	Add USAGE as a valid privilege	10 years ago
Toshio Kuratomi	5af4463823	Gixes to doc formatting	10 years ago
Toshio Kuratomi	dda6d89060	Fix typo so docs will build	10 years ago
Dan	084ccf5a64	Adds a login_unix_socket option to the postgresql_privs module.	10 years ago
Dan	3a3ff1f0e4	Adds a unix_socket/login_unix_socket option to the postgresql_user module.	10 years ago
Dan	bf36697a55	Adds a login_unix_socket option to the postgresql_db module.	10 years ago
Toshio Kuratomi	2a794fa776	Fix for single role_attr	10 years ago
Devin Christensen	06f1c1a97e	Fix user_alter in postgresql_user	10 years ago
Devin Christensen	c77ab67274	Fix user_add in postgresql_user	10 years ago
Devin Christensen	4a3d7473fd	Fix syntax error	10 years ago
Toshio Kuratomi	06ac459fc5	Correct new function name	10 years ago
Toshio Kuratomi	c84ae54294	Normalize privs and flags to uppercase so comparisons against allowed names will work	10 years ago
Toshio Kuratomi	fbc4ed7a88	Make sure we quote or confirm good all user provided identifiers	10 years ago
Toshio Kuratomi	51910a1a33	Audit escaping of identifiers in the postgresql_user module	10 years ago
Toshio Kuratomi	1b0afb137c	More robust quoting of database identifiers ... Note: These aren't database values, those are already using the appropriate Pyhton DB API method for quoting.	10 years ago
kustodian	81cbdb6c8c	Fixed postgresql_db failing on Python 2.4 with --check	10 years ago
Michael DeHaan	3ed1378067	Some more module categorization.	10 years ago