only owner can connect to new 7.8 Store repository on Postgres 8.4 server on Win XP laptop

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

only owner can connect to new 7.8 Store repository on Postgres 8.4 server on Win XP laptop

Dave Stevenson-3
I've created a new 7.8 Store repository on a Postgres 8.4 server running on my Win XP laptop, then generated the tables using:
    'Store.DbRegistry installDatabaseTables'

The SourceCodeMgmtGuide.pdf says that after evaluating the above expression, the repository is ready to use. However, that's not accurate because permissions have not yet been granted on any of the newly created tables (as the expression would have done if run in a VW 7.7.1 image), and as a result normal users cannot log in to store. I can only log in as the owner (BERN).

The doc does say how to create new users in postgres:
    #> createuser -A -D -P <username>

However, I'm not creating new users. I have existing users that have been accessing older repositories on this same server for a long time.

In any case, I don't think the problem is the user permissions, but the table permissions. Cincom resolution 100022 states that beginning in VW 7.8, #installDatabaseTables no longer creates views or grants permissions because Glorp doesn't use views, and the lack of permissions standards across SQL implementations prompted Cincom to let DBAs grant permissions instead of doing so automatically.

But where are Cincom's instructions to DBAs as to what table permissions should be granted? I couldn't find them in the SourceCodeMgmtGuide.pdf, nor in the test of resolution 100022. Should I apply the same grants as the 7.7.1 repository? (see below for list of 7.7.1 table grants). They seem to work, but I hate to guess. Can anyone confirm?

Thanks,
 
Dave Stevenson
[hidden email]

    GRANT ALL ON TABLE tw_binaryblob TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_binaryblob TO public;
    GRANT ALL ON TABLE tw_blessing TO "BERN";
    GRANT SELECT, UPDATE, INSERT ON TABLE tw_blessing TO public;
    GRANT ALL ON TABLE tw_blob TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_blob TO public;
    GRANT ALL ON TABLE tw_bundle TO "BERN";
    GRANT SELECT, UPDATE, INSERT ON TABLE tw_bundle TO public;
    GRANT ALL ON TABLE tw_bundles TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_bundles TO public;
    GRANT ALL ON TABLE tw_classrecord TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_classrecord TO public;
    GRANT ALL ON TABLE tw_data TO "BERN";
    GRANT SELECT, UPDATE, INSERT, DELETE ON TABLE tw_data TO public;
    GRANT ALL ON TABLE tw_databaseidentifier TO "BERN";
    GRANT SELECT, UPDATE ON TABLE tw_databaseidentifier TO public;
    GRANT ALL ON TABLE tw_dataelement TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_dataelement TO public;
    GRANT ALL ON TABLE tw_dbpundleprivileges TO "BERN";
    GRANT SELECT ON TABLE tw_dbpundleprivileges TO public;
    GRANT ALL ON TABLE tw_dbusergroup TO "BERN";
    GRANT SELECT ON TABLE tw_dbusergroup TO public;
    GRANT ALL ON TABLE tw_filerecord TO "BERN";
    GRANT SELECT, UPDATE, INSERT ON TABLE tw_filerecord TO public;
    GRANT ALL ON TABLE tw_files TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_files TO public;
    GRANT ALL ON TABLE tw_method TO "BERN";
    GRANT SELECT, UPDATE, INSERT ON TABLE tw_method TO public;
    GRANT ALL ON TABLE tw_methods TO "BERN";
    GRANT SELECT, UPDATE, INSERT, DELETE ON TABLE tw_methods TO public;
    GRANT ALL ON TABLE tw_namespacerecord TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_namespacerecord TO public;
    GRANT ALL ON TABLE tw_package TO "BERN";
    GRANT SELECT, UPDATE, INSERT ON TABLE tw_package TO public;
    GRANT ALL ON TABLE tw_packages TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_packages TO public;
    GRANT ALL ON TABLE tw_parcelrecord TO "BERN";
    GRANT SELECT, UPDATE, INSERT ON TABLE tw_parcelrecord TO public;
    GRANT ALL ON TABLE tw_pkgclasses TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_pkgclasses TO public;
    GRANT ALL ON TABLE tw_pkgnamespaces TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_pkgnamespaces TO public;
    GRANT ALL ON TABLE tw_properties TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_properties TO public;
    GRANT ALL ON TABLE tw_propertyrecord TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_propertyrecord TO public;


_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc
Reply | Threaded
Open this post in threaded view
|

Re: only owner can connect to new 7.8 Store repository on Postgres 8.4 server on Win XP laptop

Dave Stevenson-3
What about these new tables; what permissions should they have?:
    tw_loadrecord
    tw_methoddocs
 
Dave Stevenson
[hidden email]



From: Dave Stevenson <[hidden email]>
To: [hidden email]
Sent: Fri, October 7, 2011 4:12:51 PM
Subject: [vwnc] only owner can connect to new 7.8 Store repository on Postgres 8.4 server on Win XP laptop

I've created a new 7.8 Store repository on a Postgres 8.4 server running on my Win XP laptop, then generated the tables using:
    'Store.DbRegistry installDatabaseTables'

The SourceCodeMgmtGuide.pdf says that after evaluating the above expression, the repository is ready to use. However, that's not accurate because permissions have not yet been granted on any of the newly created tables (as the expression would have done if run in a VW 7.7.1 image), and as a result normal users cannot log in to store. I can only log in as the owner (BERN).

The doc does say how to create new users in postgres:
    #> createuser -A -D -P <username>

However, I'm not creating new users. I have existing users that have been accessing older repositories on this same server for a long time.

In any case, I don't think the problem is the user permissions, but the table permissions. Cincom resolution 100022 states that beginning in VW 7.8, #installDatabaseTables no longer creates views or grants permissions because Glorp doesn't use views, and the lack of permissions standards across SQL implementations prompted Cincom to let DBAs grant permissions instead of doing so automatically.

But where are Cincom's instructions to DBAs as to what table permissions should be granted? I couldn't find them in the SourceCodeMgmtGuide.pdf, nor in the test of resolution 100022. Should I apply the same grants as the 7.7.1 repository? (see below for list of 7.7.1 table grants). They seem to work, but I hate to guess. Can anyone confirm?

Thanks,
 
Dave Stevenson
[hidden email]

    GRANT ALL ON TABLE tw_binaryblob TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_binaryblob TO public;
    GRANT ALL ON TABLE tw_blessing TO "BERN";
    GRANT SELECT, UPDATE, INSERT ON TABLE tw_blessing TO public;
    GRANT ALL ON TABLE tw_blob TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_blob TO public;
    GRANT ALL ON TABLE tw_bundle TO "BERN";
    GRANT SELECT, UPDATE, INSERT ON TABLE tw_bundle TO public;
    GRANT ALL ON TABLE tw_bundles TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_bundles TO public;
    GRANT ALL ON TABLE tw_classrecord TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_classrecord TO public;
    GRANT ALL ON TABLE tw_data TO "BERN";
    GRANT SELECT, UPDATE, INSERT, DELETE ON TABLE tw_data TO public;
    GRANT ALL ON TABLE tw_databaseidentifier TO "BERN";
    GRANT SELECT, UPDATE ON TABLE tw_databaseidentifier TO public;
    GRANT ALL ON TABLE tw_dataelement TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_dataelement TO public;
    GRANT ALL ON TABLE tw_dbpundleprivileges TO "BERN";
    GRANT SELECT ON TABLE tw_dbpundleprivileges TO public;
    GRANT ALL ON TABLE tw_dbusergroup TO "BERN";
    GRANT SELECT ON TABLE tw_dbusergroup TO public;
    GRANT ALL ON TABLE tw_filerecord TO "BERN";
    GRANT SELECT, UPDATE, INSERT ON TABLE tw_filerecord TO public;
    GRANT ALL ON TABLE tw_files TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_files TO public;
    GRANT ALL ON TABLE tw_method TO "BERN";
    GRANT SELECT, UPDATE, INSERT ON TABLE tw_method TO public;
    GRANT ALL ON TABLE tw_methods TO "BERN";
    GRANT SELECT, UPDATE, INSERT, DELETE ON TABLE tw_methods TO public;
    GRANT ALL ON TABLE tw_namespacerecord TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_namespacerecord TO public;
    GRANT ALL ON TABLE tw_package TO "BERN";
    GRANT SELECT, UPDATE, INSERT ON TABLE tw_package TO public;
    GRANT ALL ON TABLE tw_packages TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_packages TO public;
    GRANT ALL ON TABLE tw_parcelrecord TO "BERN";
    GRANT SELECT, UPDATE, INSERT ON TABLE tw_parcelrecord TO public;
    GRANT ALL ON TABLE tw_pkgclasses TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_pkgclasses TO public;
    GRANT ALL ON TABLE tw_pkgnamespaces TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_pkgnamespaces TO public;
    GRANT ALL ON TABLE tw_properties TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_properties TO public;
    GRANT ALL ON TABLE tw_propertyrecord TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_propertyrecord TO public;


_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc
Reply | Threaded
Open this post in threaded view
|

Re: only owner can connect to new 7.8 Store repository on Postgres 8.4 server on Win XP laptop

Dave Stevenson-3
And let's not forget the sequences (what a mess):

GRANT ALL ON TABLE tw_binaryblob_sequence TO "BERN";
GRANT SELECT, UPDATE ON TABLE tw_binaryblob_sequence TO public;
GRANT ALL ON TABLE tw_blessing_sequence TO "BERN";
GRANT SELECT, UPDATE ON TABLE tw_blessing_sequence TO public;
GRANT ALL ON TABLE tw_blob_sequence TO "BERN";
GRANT SELECT, UPDATE ON TABLE tw_blob_sequence TO public;
GRANT ALL ON TABLE tw_bundle_sequence TO "BERN";
GRANT SELECT, UPDATE ON TABLE tw_bundle_sequence TO public;
GRANT ALL ON TABLE tw_classrecord_sequence TO "BERN";
GRANT SELECT, UPDATE ON TABLE tw_classrecord_sequence TO public;
GRANT ALL ON TABLE tw_dataelement_sequence TO "BERN";
GRANT SELECT, UPDATE ON TABLE tw_dataelement_sequence TO public;
GRANT ALL ON TABLE tw_filerecord_sequence TO "BERN";
GRANT SELECT, UPDATE ON TABLE tw_filerecord_sequence TO public;
GRANT ALL ON TABLE tw_method_sequence TO "BERN";
GRANT SELECT, UPDATE ON TABLE tw_method_sequence TO public;
GRANT ALL ON TABLE tw_namespacerecord_sequence TO "BERN";
GRANT SELECT, UPDATE ON TABLE tw_namespacerecord_sequence TO public;
GRANT ALL ON TABLE tw_package_sequence TO "BERN";
GRANT SELECT, UPDATE ON TABLE tw_package_sequence TO public;
GRANT ALL ON TABLE tw_parcelrecord_sequence TO "BERN";
GRANT SELECT, UPDATE ON TABLE tw_parcelrecord_sequence TO public;
GRANT ALL ON TABLE tw_propertyrecord_sequence TO "BERN";
GRANT SELECT, UPDATE ON TABLE tw_propertyrecord_sequence TO public;

 
Dave Stevenson
[hidden email]



From: Dave Stevenson <[hidden email]>
To: Dave Stevenson <[hidden email]>; [hidden email]
Sent: Fri, October 7, 2011 4:28:24 PM
Subject: Re: [vwnc] only owner can connect to new 7.8 Store repository on Postgres 8.4 server on Win XP laptop

What about these new tables; what permissions should they have?:
    tw_loadrecord
    tw_methoddocs
 
Dave Stevenson
[hidden email]



From: Dave Stevenson <[hidden email]>
To: [hidden email]
Sent: Fri, October 7, 2011 4:12:51 PM
Subject: [vwnc] only owner can connect to new 7.8 Store repository on Postgres 8.4 server on Win XP laptop

I've created a new 7.8 Store repository on a Postgres 8.4 server running on my Win XP laptop, then generated the tables using:
    'Store.DbRegistry installDatabaseTables'

The SourceCodeMgmtGuide.pdf says that after evaluating the above expression, the repository is ready to use. However, that's not accurate because permissions have not yet been granted on any of the newly created tables (as the expression would have done if run in a VW 7.7.1 image), and as a result normal users cannot log in to store. I can only log in as the owner (BERN).

The doc does say how to create new users in postgres:
    #> createuser -A -D -P <username>

However, I'm not creating new users. I have existing users that have been accessing older repositories on this same server for a long time.

In any case, I don't think the problem is the user permissions, but the table permissions. Cincom resolution 100022 states that beginning in VW 7.8, #installDatabaseTables no longer creates views or grants permissions because Glorp doesn't use views, and the lack of permissions standards across SQL implementations prompted Cincom to let DBAs grant permissions instead of doing so automatically.

But where are Cincom's instructions to DBAs as to what table permissions should be granted? I couldn't find them in the SourceCodeMgmtGuide.pdf, nor in the test of resolution 100022. Should I apply the same grants as the 7.7.1 repository? (see below for list of 7.7.1 table grants). They seem to work, but I hate to guess. Can anyone confirm?

Thanks,
 
Dave Stevenson
[hidden email]

    GRANT ALL ON TABLE tw_binaryblob TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_binaryblob TO public;
    GRANT ALL ON TABLE tw_blessing TO "BERN";
    GRANT SELECT, UPDATE, INSERT ON TABLE tw_blessing TO public;
    GRANT ALL ON TABLE tw_blob TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_blob TO public;
    GRANT ALL ON TABLE tw_bundle TO "BERN";
    GRANT SELECT, UPDATE, INSERT ON TABLE tw_bundle TO public;
    GRANT ALL ON TABLE tw_bundles TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_bundles TO public;
    GRANT ALL ON TABLE tw_classrecord TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_classrecord TO public;
    GRANT ALL ON TABLE tw_data TO "BERN";
    GRANT SELECT, UPDATE, INSERT, DELETE ON TABLE tw_data TO public;
    GRANT ALL ON TABLE tw_databaseidentifier TO "BERN";
    GRANT SELECT, UPDATE ON TABLE tw_databaseidentifier TO public;
    GRANT ALL ON TABLE tw_dataelement TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_dataelement TO public;
    GRANT ALL ON TABLE tw_dbpundleprivileges TO "BERN";
    GRANT SELECT ON TABLE tw_dbpundleprivileges TO public;
    GRANT ALL ON TABLE tw_dbusergroup TO "BERN";
    GRANT SELECT ON TABLE tw_dbusergroup TO public;
    GRANT ALL ON TABLE tw_filerecord TO "BERN";
    GRANT SELECT, UPDATE, INSERT ON TABLE tw_filerecord TO public;
    GRANT ALL ON TABLE tw_files TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_files TO public;
    GRANT ALL ON TABLE tw_method TO "BERN";
    GRANT SELECT, UPDATE, INSERT ON TABLE tw_method TO public;
    GRANT ALL ON TABLE tw_methods TO "BERN";
    GRANT SELECT, UPDATE, INSERT, DELETE ON TABLE tw_methods TO public;
    GRANT ALL ON TABLE tw_namespacerecord TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_namespacerecord TO public;
    GRANT ALL ON TABLE tw_package TO "BERN";
    GRANT SELECT, UPDATE, INSERT ON TABLE tw_package TO public;
    GRANT ALL ON TABLE tw_packages TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_packages TO public;
    GRANT ALL ON TABLE tw_parcelrecord TO "BERN";
    GRANT SELECT, UPDATE, INSERT ON TABLE tw_parcelrecord TO public;
    GRANT ALL ON TABLE tw_pkgclasses TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_pkgclasses TO public;
    GRANT ALL ON TABLE tw_pkgnamespaces TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_pkgnamespaces TO public;
    GRANT ALL ON TABLE tw_properties TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_properties TO public;
    GRANT ALL ON TABLE tw_propertyrecord TO "BERN";
    GRANT SELECT, INSERT ON TABLE tw_propertyrecord TO public;


_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc
Reply | Threaded
Open this post in threaded view
|

Re: only owner can connect to new 7.8 Store repository on Postgres 8.4 server on Win XP laptop

Samuel S. Shuster-2
In reply to this post by Dave Stevenson-3
Dave:

    tw_methoddocs

This is a dead unused table.

                                And So It Goes
                                     Sames
______________________________________________________________________

Samuel S. Shuster [|]
VisualWorks Engineering, Store Project
Smalltalk Enables Success -- What Are YOU Using?





_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc