Re: Accessing Extension with out Superuser privilege

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: "Geo P(dot)C(dot)" <pcgeopc(at)gmail(dot)com>
Cc: pgsql-admin(at)postgresql(dot)org
Subject: Re: Accessing Extension with out Superuser privilege
Date: 2015-10-15 14:23:26
Message-ID: 959.1444919006@sss.pgh.pa.us
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-admin

I wrote:
> "Geo P.C." <pcgeopc(at)gmail(dot)com> writes:
>> In PostgreSQL server we created an extension with this command CREATE
>> EXTENSION "uuid-ossp";

>> For our drupal site with user "drupal_user" we are trying to access this
>> but getting an error as "function uuid_generate_v4() does not exist"
>> When we give privilege for user "drupal_user" as Superuser we are able to
>> access it.

> It sounds like your superuser account has a default search_path that
> includes the schema this function is in, but your drupal_user account
> has a different default search_path that doesn't. You could put the
> extension in a different schema, or change drupal_user's search_path.

Ah, scratch that (-ENOCAFFEINE). What seems more likely on re-reading
this is that drupal_user lacks USAGE privilege on whatever schema contains
the uuid-ossp functions. Depending on which PG version you're using,
I believe that unreadable schemas in your search_path are silently
skipped. You could confirm that by trying to call the function using
an explicitly schema-qualified function name, and seeing if you get
a permissions error about the schema.

regards, tom lane

In response to

Browse pgsql-admin by date

  From Date Subject
Next Message Payal Singh 2015-10-15 15:39:52 Re: Create objects(table etc) to be stored in specific schema
Previous Message Tom Lane 2015-10-15 14:02:14 Re: Accessing Extension with out Superuser privilege