@@ -206,7 +206,7 @@ func (r *ReconcilePostgres) Reconcile(request reconcile.Request) (_ reconcile.Re
206
206
readerPrivs = "SELECT"
207
207
writerPrivs = "SELECT,INSERT,DELETE,UPDATE"
208
208
)
209
- for _ , schema := range instance .Spec .Schemas {
209
+ for _ , schema := range append ( instance .Spec .Schemas , "public" ) {
210
210
// Schema was previously created
211
211
if utils .ListContains (instance .Status .Schemas , schema ) {
212
212
continue
@@ -226,17 +226,17 @@ func (r *ReconcilePostgres) Reconcile(request reconcile.Request) (_ reconcile.Re
226
226
reqLogger .Error (err , fmt .Sprintf ("Could not give %s permissions \" %s\" " , reader , readerPrivs ))
227
227
continue
228
228
}
229
- reqLogger .Info ("about to give writer %s permissions" , writer )
230
- schemaPrivilegesWriter := postgres.PostgresSchemaPrivileges {database , owner , writer , schema , writerPrivs , true }
229
+ reqLogger .Info (fmt . Sprintf ( "about to give writer %s permissions" , writer ) )
230
+ schemaPrivilegesWriter := postgres.PostgresSchemaPrivileges {database , owner , writer , schema , writerPrivs , false }
231
231
err = r .pg .SetSchemaPrivileges (schemaPrivilegesWriter , reqLogger )
232
232
if err != nil {
233
233
reqLogger .Error (err , fmt .Sprintf ("Could not give %s permissions \" %s\" " , writer , writerPrivs ))
234
234
continue
235
235
}
236
- sequncesPrivilegesWriter := postgres.PostgresSequncesPrivileges {database , owner , writer , schema , writerPrivs }
236
+ sequncesPrivilegesWriter := postgres.PostgresSequncesPrivileges {database , owner , writer , schema , "USAGE" }
237
237
err = r .pg .SetSequncesPrivileges (sequncesPrivilegesWriter , reqLogger )
238
238
if err != nil {
239
- reqLogger .Error (err , fmt .Sprintf ("Could not give %s permissions for sequnces \" %s\" " , writer , writerPrivs ))
239
+ reqLogger .Error (err , fmt .Sprintf ("Could not give %s permissions for sequnces \" %s\" " , writer , "USAGE" ))
240
240
continue
241
241
}
242
242
schemaPrivilegesOwner := postgres.PostgresSchemaPrivileges {database , owner , owner , schema , readerPrivs , true }
0 commit comments