On Mon, October 5, 2020 13:34, Paul Förster wrote: > > well, actually, you can just set the search_path for the role the application > logs in with: > > alter role <app_role> set search_path = '<schema>, pg_catalog, public'; > > The next time <app_role> logs in, it should see the freshly set search_path. > > When we create an app schema and role set in our databases, we always do this > to make sure that the application role always finds its schema. We never had > any problems with this. > > https://www.postgresql.org/docs/current/ddl-schemas.html#DDL-SCHEMAS-PATH > https://www.postgresql.org/docs/current/sql-alterrole.html > > Hope this helps, > Paul idempiere(5432)=# select schema_name idempiere-# from information_schema.schemata; schema_name -------------------- public information_schema pg_catalog pg_toast_temp_1 pg_temp_1 pg_toast adempiere (7 rows) Do I infer from this that the application installer adds a schema called adempiere; regardless of what username I choose for the database owner? Or did I cause this selection of schema name through some explicit action of my own? I also infer that this can be corrected in the manner suggested by issuing: alter role idempiere-dbadmin set search_path = 'adempiere, pg_catalog, public'; Is this correct? When I created the user adempiere I used this: su - postgres -c 'createuser -S -d -r -l -P adempiere' Now, man createuser says this: . . . -S --no-superuser The new user will not be a superuser. This is the default. . . . But, psql says this (somewhat compressed): idempiere(5432)=# \du List of roles Role name | Attributes | Member of adempiere | Superuser | {} . . . So, as I specified -S (--no-superuser when creating this user how comes it that the adempiere username does, in fact, have the Superuser privilege? This is not something that I am conscious of having granted. For that matter, I first would have to research the exact command syntax to carry it out. Something in the installer must be doing something to the adempiere role, but I cannot find where. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Unencrypted messages have no legal claim to privacy Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@xxxxxxxxxxxxx Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3
