citusdata / citusdata/pg_cron

Azure Postgres Job Table Permissions

Open
#316 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
3.9k
Forks
260
Avg merge
5d 5h
Merged PRs (30d)
1

Description

We have multiple admins maintaining an Azure Postgres instance. Azure does not let us have SU unfortunately. Which means that as the pg_cron table are created with the "azuresu" account, and public only has read only access, we cannot change permissions on the table nor can we see each others jobs or job details.

We would like our admins to be able to see all jobs in the jobs table, or at least the ability to grant this. However we cannot change permissions or the owner of the table. Keeping us from changing any permissions.

This is a huge issue as we cannot see other users jobs or delete them even if we know the id. Nor can we update someone elses existing job.

Now if a user leaves the company we have to change their password and log is as them to see if they have any jobs. Also, there is no way for us to write an automated report for any failed jobs.

EDIT: Clarification

Contributor guide

No contributing guide indexed for this repository

Research direction

The issue names pg_cron’s jobs table and the azuresu-owned tables; start by tracing how job visibility, ownership, and permissions are defined for Azure Postgres. Determine a supported way for administrators to inspect, modify, delete, and report on other users’ jobs, then document the expected permission behavior and verify it against an Azure Postgres instance.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure, postgresql
Domain
cloud, databases
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.