airajena commented on code in PR #102:
URL:
https://github.com/apache/fineract-business-intelligence/pull/102#discussion_r4318441231
##########
docker/postgres-warehouse/initdb/002_create_warehouse_roles.sh:
##########
@@ -64,6 +75,7 @@ ALTER DEFAULT PRIVILEGES FOR ROLE ${WAREHOUSE_LOADER_USER} IN
SCHEMA analytics
-- Explicitly deny reader access to non-analytics schemas.
REVOKE ALL ON SCHEMA raw FROM ${WAREHOUSE_READER_USER};
+REVOKE ALL ON SCHEMA raw_shadow FROM ${WAREHOUSE_READER_USER};
Review Comment:
Fixed. The schema-wide grant is gone, and the reader can only execute the
two SECURITY DEFINER functions the secure datasets use. MAINTAIN is now granted
on the raw and raw_shadow schemas only, not cluster-wide.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
