Azure Postgres Job Table Permissions
- Dominant language
- C
- Stars
- 3.9k
- Forks
- 260
- Avg merge
- 5d 5h
- Merged PRs (30d)
- 1
Description
We have multiple admins maintaining an Azure Postgres instance. Azure does not let us have SU unfortunately. Which means that as the pg_cron table are created with the "azuresu" account, and public only has read only access, we cannot change permissions on the table nor can we see each others jobs or job details.
We would like our admins to be able to see all jobs in the jobs table, or at least the ability to grant this. However we cannot change permissions or the owner of the table. Keeping us from changing any permissions.
This is a huge issue as we cannot see other users jobs or delete them even if we know the id. Nor can we update someone elses existing job.
Now if a user leaves the company we have to change their password and log is as them to see if they have any jobs. Also, there is no way for us to write an automated report for any failed jobs.
EDIT: Clarification
Contributor guide
No contributing guide indexed for this repository
Research direction
The issue names pg_cron’s jobs table and the azuresu-owned tables; start by tracing how job visibility, ownership, and permissions are defined for Azure Postgres. Determine a supported way for administrators to inspect, modify, delete, and report on other users’ jobs, then document the expected permission behavior and verify it against an Azure Postgres instance.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure, postgresql
- Domain
- cloud, databases
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100