public/postgresql_passchanger_function
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Improvements

Browse Source
This commit is contained in:
dodger 2022-05-09 18:02:43 +02:00
parent 7138110090
commit 2f364bce8a
Signed by: dodger
GPG Key ID: F6701F6CB4D1C826
4 changed files with 2 additions and 25 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
README_rds.md
View File

@ -14,10 +14,8 @@ As Amazon has modified Postgresql so you don't have access as a *real* superuser
## Instructions ## Instructions
##
### First deploy ### First deploy
Deploy `passchanger.sql` on the desired cluster/database. Deploy `passchanger_rds.sql` on the desired cluster/database.
It will: It will:
* create a `dba` schema * create a `dba` schema

8
grants_to_grant.sql
View File

@ -14,11 +14,3 @@ GRANT INSERT ON TABLE dba.pwdhistory TO dodger;
-- SET SESSION AUTORIZATION dodger ; -- SET SESSION AUTORIZATION dodger ;
'tV4{A#&x|P%hKM9*}4a0'
select dba.change_my_password( 'XFF{O>%|<e%_#F$pHqaB' ) ;
XFF{O>%|<e%_#F$pHqaB

12
grants_to_grant_rds.sql
View File

@ -1,12 +0,0 @@
-- grant usage for schema dba
grant usage on schema dba to dodger ;
-- grant execute on the function change_my_password
grant execute on function dba.change_my_password(text) to dodger;
-- grant execute on the function change_valid_until
grant execute on function dba.change_valid_until(text, text) to dodger;
-- only insert is needed to allow audit trace
GRANT INSERT ON TABLE dba.pwdhistory TO dodger;

3
passchanger_rds.sql
View File

@ -11,7 +11,6 @@ GRANT rds_superuser TO dba ;
-- grant select on pg_catalog.pg_authid to dba ; -- grant select on pg_catalog.pg_authid to dba ;
grant pg_read_all_stats to dba ; grant pg_read_all_stats to dba ;
-- password history table -- password history table
CREATE TABLE IF NOT EXISTS dba.pwdhistory CREATE TABLE IF NOT EXISTS dba.pwdhistory
( (
@ -88,7 +87,7 @@ begin
end end
$BODY$; $BODY$;
ALTER FUNCTION dba.change_valid_until(text, text) OWNER TO dba; -- ALTER FUNCTION dba.change_valid_until(text, text) OWNER TO dba;
REVOKE EXECUTE ON FUNCTION dba.change_valid_until(text, text) From PUBLIC; REVOKE EXECUTE ON FUNCTION dba.change_valid_until(text, text) From PUBLIC;
CREATE OR REPLACE FUNCTION dba.change_my_password(_password text) CREATE OR REPLACE FUNCTION dba.change_my_password(_password text)