From 64bafe6be9bfea8baae0806fe9416394ff321e57 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Mart=C3=ADn=20Marqu=C3=A9s?= Date: Thu, 4 Jun 2020 08:44:20 -0300 Subject: [PATCH v4 2/4] We want the monitoring role `pg_read_all_stats` to be able to SELECT from `pg_replication_origin_status`. We also need to give this role EXECUTE privileges for `pg_show_replication_origin_status()`. --- src/backend/catalog/system_views.sql | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/backend/catalog/system_views.sql b/src/backend/catalog/system_views.sql index 6658f0c2eb2..9949b4316f5 100644 --- a/src/backend/catalog/system_views.sql +++ b/src/backend/catalog/system_views.sql @@ -1123,6 +1123,9 @@ CREATE VIEW pg_replication_origin_status AS REVOKE ALL ON pg_replication_origin_status FROM public; +GRANT SELECT ON pg_replication_origin_status TO pg_read_all_stats; + + -- All columns of pg_subscription except subconninfo are readable. REVOKE ALL ON pg_subscription FROM public; GRANT SELECT (subdbid, subname, subowner, subenabled, subslotname, subpublications) @@ -1485,6 +1488,8 @@ REVOKE EXECUTE ON FUNCTION pg_replication_origin_xact_reset() FROM public; REVOKE EXECUTE ON FUNCTION pg_replication_origin_xact_setup(pg_lsn, timestamp with time zone) FROM public; REVOKE EXECUTE ON FUNCTION pg_show_replication_origin_status() FROM public; +GRANT EXECUTE ON FUNCTION pg_show_replication_origin_status() TO pg_read_all_stats; + -- -- We also set up some things as accessible to standard roles. -- -- 2.21.3