salt.states.postgres_default_privileges#

Management of PostgreSQL Default Privileges#

The postgres_default_privileges module is used to manage Postgres privileges by default. Privileges can be set as either absent or present. They take any and all previously existing and future objects into account.

Privileges can be set on the following database object types:

schema
table
sequence
group

Setting the grant option is supported as well.

New in version 3009.0.

baruwa:
  postgres_default_privileges.present:
    - object_name: awl
    - object_type: table
    - privileges:
      - SELECT
      - INSERT
      - DELETE
    - grant_option: False
    - prepend: public
    - maintenance_db: testdb

andrew:
  postgres_default_privileges.present:
    - object_name: admins
    - object_type: group
    - grant_option: False
    - maintenance_db: testdb

baruwa:
  postgres_default_privileges.absent:
    - object_name: awl
    - object_type: table
    - privileges:
      - SELECT
      - INSERT
      - DELETE
    - prepend: public
    - maintenance_db: testdb

andrew:
  postgres_default_privileges.absent:
    - object_name: admins
    - object_type: group
    - maintenance_db: testdb

salt.states.postgres_default_privileges.absent(name, object_name, object_type, defprivileges=None, prepend='public', maintenance_db=None, user=None, db_password=None, db_host=None, db_port=None, db_user=None)#

Revoke the requested default privilege(s) on the specificed object(s)

name

Name of the role whose default privileges should be revoked

object_name

Name of the object on which the revoke is to be performed

object_type

The object type, which can be one of the following:

table
sequence
schema
tablespace -- to delete
language -- to delete
database - to delete
group
function

View permissions should specify object_type: table.

privileges

Comma separated list of default privileges to revoke, from the list below:

INSERT
CREATE
TRUNCATE
CONNECT
TRIGGER
SELECT
USAGE
TEMPORARY
UPDATE
EXECUTE
REFERENCES
DELETE
ALL

note:: default privileges should not be set when revoking group membership

prepend

Table and Sequence object types live under a schema so this should be provided if the object is not under the default public schema

maintenance_db

The name of the database in which the language is to be installed

user

System user all operations should be performed on behalf of

db_user

database username if different from config or default

db_password

user password if any password for a specified user

db_host

Database host if different from config or default

db_port

Database port if different from config or default

Example:

baruwa:
  postgres_default_privileges.absent:
    - object_name: awl
    - object_type: table
    - defprivileges:
      - SELECT
      - INSERT
      - DELETE
    - prepend: public
    - maintenance_db: testdb

salt.states.postgres_default_privileges.present(name, object_name, object_type, defprivileges=None, grant_option=None, prepend='public', maintenance_db=None, user=None, db_password=None, db_host=None, db_port=None, db_user=None)#

Grant the requested privilege(s) on the specified object to a role