crunchy_check_access icon indicating copy to clipboard operation
crunchy_check_access copied to clipboard

all_access() returns incomplete results?

Open hai-ld opened this issue 5 years ago • 1 comments

Following the examples in your blog article https://info.crunchydata.com/blog/postgresql-defaults-and-impact-on-security-part-1, all_access() seems to return incomplete results: joe is a member of both dbadm and endusers, so his privileges should be the same as alice, however array_agg(base_role) does not contain him, while alice is in the list. I've verified on a PostgreSQL 11 installation that joe can SET ROLE dbadm then CREATE DATABASE joe.

hai-ld avatar Jul 21 '19 09:07 hai-ld

@hai-ld I was not able to reproduce the issue. In the output from all_access I do see both joe and alice listed. Let us know if you are still facing challenges.

cbrianpace avatar Feb 12 '24 21:02 cbrianpace