Comments (6)
I'm thinking of extending ldap2pg to help managing this case. Here is an idea:
- role: name: '{cn}' on_create: | CREATE SCHEMA {role}; on_alter: | ALTER SCHEMA {old} RENAME TO {new}; on_drop: | DROP SCHEMA {role} CASCADE;
@bersace, is it still considered ? This looks quite interesting. Would definitely be useful for me !
from ldap2pg.
Hi @joshlk actually, you can already do this by hacking the ACL mechanism :-) Just think grant
as create
and revoke
as drop
. This should look like:
acls:
user_schema:
type: datacl
inspect: |
SELECT NULL as "schema", rolname
FROM pg_namespace n
JOIN pg_authid ON rolname = nspname
grant: |
CREATE SCHEMA {role};
ALTER USER {role} SET search_path {role},public;
sync_map:
- role: myuser
grant:
acl: user_schema
database: mydb
role: myuser
YMMV
from ldap2pg.
I'm thinking of extending ldap2pg to help managing this case. Here is an idea:
- role:
name: '{cn}'
on_create: |
CREATE SCHEMA {role};
on_alter: |
ALTER SCHEMA {old} RENAME TO {new};
on_drop: |
DROP SCHEMA {role} CASCADE;
What do you think of it ? Would you prefer global on_create
, on_drop
? Thanks for the feedback.
from ldap2pg.
Another solution would be the allows override of queries :
postgres:
queries:
role_create: |
CREATE ROLE "{role}" WITH {options};
COMMENT ON ROLE "{role}" IS '{comment}';
CREATE SCHEMA "{role}";
ALTER ROLE "{role}" SET search_path = "{role}",public;
from ldap2pg.
Would you prefer global
on_create
,on_drop
? Thanks for the feedback.
I would like to see both. Some queries might be useful on a global level, others just for specific roles.
from ldap2pg.
Closing in favor of #565.
from ldap2pg.
Related Issues (20)
- Configure role per database HOT 2
- ldap2pg does not synchronize when using {cn} in name or parent HOT 2
- Is predefined role pg_signal_backend required when.using unpriv user? HOT 3
- Complex AD configuration V6.0 HOT 1
- Configure Python Version of ldap2pg v5.9 HOT 8
- Match different Active Directories HOT 5
- ldap2pg cron.d HOT 3
- endless loop when trying to create roles with parent HOT 3
- ldap2pg 6 in official postgres-common repository HOT 2
- Drop schema cascade? HOT 1
- Issue with Applying Privileges for All Schemas HOT 8
- Connect to different Postgres Servers
- Use GSSAPI for directory authentication HOT 8
- WARN Unexpected DN HOT 11
- Privileges for PostgreSQL procedures HOT 7
- fallback_owner HOT 5
- Typo in documentation
- Runtime error : invalid memory address or nil pointer dereference HOT 2
- Requesting a new build of 5.xversion
- Own Priviliges in Version 6.1 ? HOT 5
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ldap2pg.