Re: Changed functionality from 14.3 to 15.3

[Michael Corey <michael.corey.ap@xxxxxxxxxxx>]

PG 14 Server

psql (14.2, server 14.3)
You are now connected to database "db14" as user "postgres".
db14=>  \dn+ ref_schema|sten_schema
                              List of schemas
    Name     |    Owner    |        Access privileges        | Description
-------------+-------------+---------------------------------+-------------
 ref_schema  | ref_schema  | ref_schema=UC/ref_schema       +|
             |             | sten_schema=U/ref_schema       +|
             |             | ref_schema_read=U/ref_schema   +|
             |             | ref_schema_write=U/ref_schema   |
 sten_schema | sten_schema | sten_schema=UC/sten_schema     +|
             |             | ref_schema=U/sten_schema       +|
             |             | sten_schema_read=U/sten_schema +|
             |             | sten_schema_write=U/sten_schema |
(2 rows)


db14=> \dp ref_schema.ref_media_code
                                          Access privileges
   Schema   |      Name      | Type  |       Access privileges        | Column privileges | Policies
------------+----------------+-------+--------------------------------+-------------------+----------
 ref_schema | ref_media_code | table | ref_schema=arwdDxt/ref_schema +|                   |
            |                |       | ref_schema_read=r/ref_schema  +|                   |
            |                |       | sten_schema_write=r/ref_schema |                   |
(1 row)


db14=> \dp sten_schema.sten_media_codes_view
                                              Access privileges
   Schema    |         Name          | Type |        Access privileges        | Column privileges | Policies
-------------+-----------------------+------+---------------------------------+-------------------+----------
 sten_schema | sten_media_codes_view | view | sten_schema=arwdDxt/sten_schema+|                   |
             |                       |      | sten_schema_write=r/sten_schema |                   |
(1 row)

PG 15 server
psql (14.2, server 15.3)
You are now connected to database "db14" as user "postgres".
db14=>  \dn+ ref_schema|sten_schema
                              List of schemas
    Name     |    Owner    |        Access privileges        | Description
-------------+-------------+---------------------------------+-------------
 ref_schema  | ref_schema  | ref_schema=UC/ref_schema       +|
             |             | sten_schema=U/ref_schema       +|
             |             | ref_schema_read=U/ref_schema   +|
             |             | ref_schema_write=U/ref_schema   |
 sten_schema | sten_schema | sten_schema=UC/sten_schema     +|
             |             | ref_schema=U/sten_schema       +|
             |             | sten_schema_read=U/sten_schema +|
             |             | sten_schema_write=U/sten_schema |
(2 rows)


db14=> \dp ref_schema.ref_media_code
                                          Access privileges
   Schema   |      Name      | Type  |       Access privileges        | Column privileges | Policies
------------+----------------+-------+--------------------------------+-------------------+----------
 ref_schema | ref_media_code | table | ref_schema=arwdDxt/ref_schema +|                   |
            |                |       | ref_schema_read=r/ref_schema  +|                   |
            |                |       | sten_schema_write=r/ref_schema |                   |
(1 row)


db14=> \dp sten_schema.sten_media_codes_view
                                              Access privileges
   Schema    |         Name          | Type |        Access privileges        | Column privileges | Policies
-------------+-----------------------+------+---------------------------------+-------------------+----------
 sten_schema | sten_media_codes_view | view | sten_schema=arwdDxt/sten_schema+|                   |
             |                       |      | sten_schema_write=r/sten_schema |                   |
(1 row)

"And both databases start empty or at least in the exact same state?"
Yes, this is a test case, so I created two new databases one in 14.3 and one in 15.3, did the setup as I provided, and ran the two SELECTs in both databases and received different results.

On Wed, Sep 20, 2023 at 12:33 PM Erik Wienhold <ewie@xxxxxxxxx> wrote:

On 2023-09-20 09:15 -0400, Michael Corey wrote:
> Thanks for responding.  All of the DDL is just the setup for the test
> case.  I ran those steps in both databases to setup the exact same
> environment.

And both databases start empty or at least in the exact same state?

> The COMMIT is not needed for the test out of habit I put it
> in my setup.  The main issue is in 14.3 I can run this select as user
> sten_schema, but in 15.3 I am unable due to a permission issue.

I don't know why those privileges could be missing if that script
completes.  Please provide the privileges like I asked to see what's
actually granted on both databases:

> On Tue, Sep 19, 2023 at 8:17 PM Erik Wienhold <ewie@xxxxxxxxx> wrote:
> >
> > Have you checked that the permissions are actually the same on both
> > databases after running that script?
> >
> >         \dn+ ref_schema|sten_schema
> >         \dp ref_schema.ref_media_code
> >         \dp sten_schema.sten_media_codes_view

--
Erik

--

Michael Corey