postgres-operator icon indicating copy to clipboard operation
postgres-operator copied to clipboard

Standby user has write access

Open haslersn opened this issue 8 months ago • 1 comments

AFAIK the standby user should have only the permissions required for replication. However, it seems the user has write access:

root@test-db-0:/home/postgres# psql -U standby db
psql (16.3 (Ubuntu 16.3-1.pgdg22.04+1), server 15.7 (Ubuntu 15.7-1.pgdg22.04+1))
Type "help" for help.

db=> SELECT CURRENT_USER;
 current_user 
--------------
 standby
(1 row)

db=> create table aaaaa_test (dummy INTEGER NOT NULL PRIMARY KEY);
CREATE TABLE
db=> drop table aaaaa_test ;
DROP TABLE
  • postgres-operator version: ghcr.io/zalando/postgres-operator:v1.13.0
  • Spilo version: ghcr.io/zalando/spilo-16:3.3-p1
  • Type of issue: Bug report

haslersn avatar Mar 29 '25 19:03 haslersn

In which schema are you creating the table. Is this a new Postgres 15 database cluster? I would have assumed now that this has to do with the default privilege to create things in public schema inherited from the PUBLIC role. But this has been removed starting from Pg15.

FxKu avatar Apr 23 '25 07:04 FxKu