-
Notifications
You must be signed in to change notification settings - Fork 695
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix incorrect "VALID UNTIL" assumption made for roles in node activation #7534
Conversation
Codecov Report
Additional details and impacted files@@ Coverage Diff @@
## main #7534 +/- ##
==========================================
- Coverage 89.68% 89.52% -0.16%
==========================================
Files 283 283
Lines 60428 60424 -4
Branches 7525 7525
==========================================
- Hits 54194 54096 -98
- Misses 4080 4141 +61
- Partials 2154 2187 +33 |
Upgrade tests are still failing --need to take a closer look. |
DETAIL: on server postgres@localhost:xxxxx connectionId: xxxxxxx | ||
NOTICE: issuing SELECT worker_create_or_alter_role('user 2', 'CREATE ROLE "user 2" NOSUPERUSER NOCREATEDB NOCREATEROLE INHERIT NOLOGIN NOREPLICATION NOBYPASSRLS CONNECTION LIMIT -1 PASSWORD NULL VALID UNTIL ''infinity''', 'ALTER ROLE "user 2" NOSUPERUSER NOCREATEDB NOCREATEROLE INHERIT NOLOGIN NOREPLICATION NOBYPASSRLS CONNECTION LIMIT -1 PASSWORD NULL VALID UNTIL ''infinity''');SECURITY LABEL FOR "citus '!tests_label_provider" ON ROLE "user 2" IS 'citus ''!unclassified' | ||
NOTICE: issuing SELECT worker_create_or_alter_role('user 2', 'CREATE ROLE "user 2" NOSUPERUSER NOCREATEDB NOCREATEROLE INHERIT NOLOGIN NOREPLICATION NOBYPASSRLS CONNECTION LIMIT -1 PASSWORD NULL', 'ALTER ROLE "user 2" NOSUPERUSER NOCREATEDB NOCREATEROLE INHERIT NOLOGIN NOREPLICATION NOBYPASSRLS CONNECTION LIMIT -1 PASSWORD NULL');SECURITY LABEL FOR "citus '!tests_label_provider" ON ROLE "user 2" IS 'citus ''!unclassified' |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should it maybe be VALID UNTIL NULL
instead of completely removing it?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I believe it't not valid to use NULL
for valid until
:
create user new_user password '12345' valid until null;
ERROR: syntax error at or near "null"
LINE 1: create user new_user password '12345' valid until null;
^
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I believe it't not valid to use
NULL
forvalid until
:create user new_user password '12345' valid until null; ERROR: syntax error at or near "null" LINE 1: create user new_user password '12345' valid until null; ^
What do you think about this @JelteF?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yeah, if that syntax is invalid than obviously not.
4b94673
to
1c14872
Compare
b540988
to
861cc92
Compare
1c14872
to
4d68745
Compare
861cc92
to
d99505f
Compare
c25efdd
to
4ea1960
Compare
d99505f
to
b7cd28c
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Well done :)
4ea1960
to
0ba9820
Compare
Fixes #7533.
DESCRIPTION: Fixes incorrect
VALID UNTIL
setting assumption made for roles when syncing them to new nodes