-
-
Notifications
You must be signed in to change notification settings - Fork 189
fix: grant pgsodium functions to service_role #443
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Using supautils's extension custom scripts. The script will be run on `create extension pgsodium`.
1ff1f66
to
c01fc87
Compare
-- Name: key_encrypt_secret(); Type: FUNCTION; Schema: pgsodium; Owner: - | ||
-- | ||
|
||
CREATE FUNCTION pgsodium.key_encrypt_secret() RETURNS trigger |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The schema
test has been failing for a while, so I guess this just reflects the latest pgsodium version.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
c01fc87
to
a59aded
Compare
-- Name: decrypted_key; Type: VIEW; Schema: pgsodium; Owner: - | ||
-- | ||
|
||
CREATE VIEW pgsodium.decrypted_key AS |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@michelp do you know why this got dropped now? If I recreate pgsodium
it gets dumped again.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think I got it - this was fixed in pgsodium 3.1.1 but now this issue is back, so we need to revert the migration.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
(I'll hold off on reverting it until Michel's done with the pgsodium fixes)
Looks good to me |
I guess we can merge and test this on staging and ask him later - one less thing to fix at once |
* fix: grant pgsodium functions to service_role Using supautils's extension custom scripts. The script will be run on `create extension pgsodium`. * test: service_role can execute certain pgsodium functions * chore: update schema.sql * chore: bump postgres version Co-authored-by: Paul Cioanca <paul.cioanca@supabase.io>
Using supautils's extension custom scripts. The script will be run on
create extension pgsodium
.