Will Thames
43bad27948
Update postgresql users only when necessary
...
For read-only databases, users should not change when no changes
are required.
Don't issue ALTER ROLE when role attribute flags, users password
or expiry time is not changing.
In certain cases (hashed passwords in the DB, but the password
argument is not hashed) passlib.hash is required to avoid
running ALTER ROLE.
2016-12-08 11:22:56 -05:00
tedder
9fd568f655
code review fixes per #957
2016-12-08 11:22:52 -05:00
tedder
35ce9fb095
skip password changes so pg_authid isn't needed
...
Some places ([AWS RDS](https://forums.aws.amazon.com/thread.jspa?threadID=151248 )) don't have, or don't allow, access to the `pg_authid` table. The only reason that is necessary is to check for a password change.
This flag is a workaround so passwords can only be set at creation time. It isn't as elegant as changing the password down the line, but it fixes the longstanding issue #297 that prevented this from being useful on AWS RDS.
2016-12-08 11:22:52 -05:00
Johannes Steger
1a440d6a06
Fix function identifier quoting
2016-12-08 11:22:39 -05:00
Michael J. Schultz
588d03db8d
Build the db connection on `"postgres"` instead of `"template1"`
...
According to the postgresql docs[1], you should not have a connection with
`"template1"` when copying multiple databases.
[1]: http://www.postgresql.org/docs/9.1/static/manage-ag-templatedbs.html
2016-12-08 11:22:36 -05:00
kustodian
8621f9a7cd
Fixed postgresql_db failing on Python 2.4 with --check
...
This reverts commit 81cbdb6c8cf54c41ba2ee3330c968e2feea05a5c and adds ignoring of the SystemExit exception because of Python 2.4.
2016-12-08 11:22:33 -05:00
Toshio Kuratomi
9fde3c2dc5
Add USAGE as a valid privilege
2016-12-08 11:22:31 -05:00
Toshio Kuratomi
cd7cc07e85
Gixes to doc formatting
2016-12-08 11:22:31 -05:00
Toshio Kuratomi
307116b838
Fix typo so docs will build
2016-12-08 11:22:31 -05:00
Dan
fe787f1bc9
Adds a login_unix_socket option to the postgresql_privs module.
2016-12-08 11:22:29 -05:00
Dan
ee65c55fb0
Adds a unix_socket/login_unix_socket option to the postgresql_user module.
2016-12-08 11:22:29 -05:00
Dan
789ee410f1
Adds a login_unix_socket option to the postgresql_db module.
2016-12-08 11:22:29 -05:00
Toshio Kuratomi
e8081baca9
Fix for single role_attr
2016-12-08 11:22:28 -05:00
Devin Christensen
b2829cf6b9
Fix user_alter in postgresql_user
2016-12-08 11:22:28 -05:00
Devin Christensen
ff7a9eb625
Fix user_add in postgresql_user
2016-12-08 11:22:28 -05:00
Toshio Kuratomi
87b2afc272
Correct new function name
2016-12-08 11:22:28 -05:00
Toshio Kuratomi
3e9771f544
Normalize privs and flags to uppercase so comparisons against allowed names will work
2016-12-08 11:22:28 -05:00
Toshio Kuratomi
e0ac340f59
Make sure we quote or confirm good all user provided identifiers
2016-12-08 11:22:28 -05:00
Toshio Kuratomi
d3787840a4
Audit escaping of identifiers in the postgresql_user module
2016-12-08 11:22:28 -05:00
Toshio Kuratomi
32aaa07325
More robust quoting of database identifiers
...
Note: These aren't database values, those are already using the
appropriate Pyhton DB API method for quoting.
2016-12-08 11:22:27 -05:00
Michael DeHaan
5d814d9fb2
Some more module categorization.
2016-12-08 11:22:25 -05:00