From 8b45a171e8a41aa8f386b3f1c0cabc0ebb91a640 Mon Sep 17 00:00:00 2001 From: xbgmsharp Date: Mon, 12 Dec 2022 16:21:42 +0100 Subject: [PATCH] Update vessel_role permission for new api.metrics trigger --- initdb/02_6_signalk_roles.sql | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/initdb/02_6_signalk_roles.sql b/initdb/02_6_signalk_roles.sql index 6e271ae..c6ea336 100644 --- a/initdb/02_6_signalk_roles.sql +++ b/initdb/02_6_signalk_roles.sql @@ -128,6 +128,12 @@ GRANT INSERT ON TABLE public.process_queue TO vessel_role; GRANT USAGE, SELECT ON SEQUENCE public.process_queue_id_seq TO vessel_role; -- explicitly limit EXECUTE privileges to pgrest db-pre-request function GRANT EXECUTE ON FUNCTION public.check_jwt() to vessel_role; +-- explicitly limit EXECUTE privileges to api.metrics triggers function +GRANT EXECUTE ON FUNCTION public.trip_in_progress_fn(text) to vessel_role; +GRANT EXECUTE ON FUNCTION public.stay_in_progress_fn(text) to vessel_role; +-- hypertable get_partition_hash ?!? +--GRANT EXECUTE ON FUNCTION public.get_partition_hash() to vessel_role; + --- Scheduler: -- TODO: currently cron function are run as super user, switch to scheduler role.