From 2f364bce8a55d4a5c727adad718307b4ab2f29da Mon Sep 17 00:00:00 2001
From: dodger <dodger@ciberterminal.net>
Date: Mon, 9 May 2022 18:02:43 +0200
Subject: [PATCH] Improvements

---
 README_rds.md           |  4 +---
 grants_to_grant.sql     |  8 --------
 grants_to_grant_rds.sql | 12 ------------
 passchanger_rds.sql     |  3 +--
 4 files changed, 2 insertions(+), 25 deletions(-)
 delete mode 100644 grants_to_grant_rds.sql

diff --git a/README_rds.md b/README_rds.md
index c63df85..be51db5 100644
--- a/README_rds.md
+++ b/README_rds.md
@@ -14,10 +14,8 @@ As Amazon has modified Postgresql so you don't have access as a *real* superuser
 
 ## Instructions
 
-##
-
 ### First deploy
-Deploy `passchanger.sql` on the desired cluster/database.
+Deploy `passchanger_rds.sql` on the desired cluster/database.
 
 It will:
   * create a `dba` schema
diff --git a/grants_to_grant.sql b/grants_to_grant.sql
index 3c5bc2c..192fb11 100644
--- a/grants_to_grant.sql
+++ b/grants_to_grant.sql
@@ -14,11 +14,3 @@ GRANT INSERT ON TABLE dba.pwdhistory TO dodger;
 
 -- SET SESSION AUTORIZATION dodger ;
 
-
-
-'tV4{A#&x|P%hKM9*}4a0'
-
-select dba.change_my_password( 'XFF{O>%|<e%_#F$pHqaB' ) ;
-
-
-XFF{O>%|<e%_#F$pHqaB
diff --git a/grants_to_grant_rds.sql b/grants_to_grant_rds.sql
deleted file mode 100644
index 22b2d3e..0000000
--- a/grants_to_grant_rds.sql
+++ /dev/null
@@ -1,12 +0,0 @@
-
--- grant usage for schema dba
-grant usage on schema dba to dodger ;
-
--- grant execute on the function change_my_password
-grant execute on function dba.change_my_password(text) to dodger;
--- grant execute on the function change_valid_until
-grant execute on function dba.change_valid_until(text, text) to dodger;
-
--- only insert is needed to allow audit trace
-GRANT INSERT ON TABLE dba.pwdhistory TO dodger;
-
diff --git a/passchanger_rds.sql b/passchanger_rds.sql
index 9eb6645..bbade3d 100644
--- a/passchanger_rds.sql
+++ b/passchanger_rds.sql
@@ -11,7 +11,6 @@ GRANT rds_superuser TO dba ;
 -- grant select on pg_catalog.pg_authid to dba ;
 grant pg_read_all_stats to dba ;
 
-
 -- password history table
 CREATE TABLE IF NOT EXISTS dba.pwdhistory
 (
@@ -88,7 +87,7 @@ begin
 end
 $BODY$;
 
-ALTER FUNCTION dba.change_valid_until(text, text) OWNER TO dba;
+-- ALTER FUNCTION dba.change_valid_until(text, text) OWNER TO dba;
 REVOKE EXECUTE ON FUNCTION dba.change_valid_until(text, text) From PUBLIC;
 
 CREATE OR REPLACE FUNCTION dba.change_my_password(_password text)