Re: BUG #14456: pg_dump doesn't restore permissions on tables belonging to an extension

Thank you both, Tom and Stephen!

On Thu, Jan 12, 2017 at 2:25 PM Stephen Frost <sfrost(at)snowman(dot)net> wrote:

> * Tom Lane (tgl(at)sss(dot)pgh(dot)pa(dot)us) wrote:
> > Stephen Frost <sfrost(at)snowman(dot)net> writes:
> > > * Tom Lane (tgl(at)sss(dot)pgh(dot)pa(dot)us) wrote:
> > >> Hmm. There's an argument to be made that ALTER EXTENSION ADD should
> > >> absorb whatever the object's current ACLs are into the pg_init_privs
> > >> entries for the extension. (I don't think it does that now, though
> > >> I might be wrong.) However ...
> >
> > > I've not gone and looked yet, but I doubt that it does. I think I can
> > > agree with the argument that it really should add those ACLs to
> > > pg_init_privs. Of course, any furhter manipulation of the ACLs from
> > > that point will cause those ACLs to be included in the pg_dump.
> >
> > > I'll take a look at ALTER EXTENSION ADD and pg_init_privs.
> >
> > By the same token, does ALTER EXTENSION DROP remove those entries?
>
> I'll make sure it does. My guess at the moment is that it doesn't.
>
> Thanks!
>
> Stephen
>
--
Moshe Jacobson
Principal Architect, Nead Werx Inc.