Unable to GRANT SELECT on all columns (have to be explicit about which columns)

Thanks for this library! Searched but didn’t see anything about this. It seems like to GRANT SELECT using PGGrantTable, we need to explicitly specify which columns to GRANT SELECT. This excludes statements like the following from being easily encoded with this class:

GRANT SELECT ON <table> to <user>;

Was just curious if this was something that had been encountered yet.

[pgorsira]

Hey, just wanted to let you know that this did seem to work! Once I wired it up and autogenerated a migration it was able to recognize a GRANT that already existed in the DB and not generate a line for that GRANT in the upgrade/downgrade functions.

However after some thinking I think I’m going to go with Ansible for keeping GRANTS in sync as I think it’ll be simpler / offer more clarity as to the current state of the DB. Really appreciate your help though.

[olirice]

whoops, i misunderstood

if you’re feeling adventurous you could dynamically populate the columns from the database in env.py before passing them to register_entities

# env.py
my_grants: List[PGGrantTable] = ...
sess: sqlalchemy.orm.Session = ...

for grant in my_grants:
    columns, = sess.execute(text("""
      select
	      array_agg(column_name order by ordinal_position)
      from
	      information_schema.columns
      where
	      table_schema = :schema
	      and table_name = :table
      order by
	      ordinal_position
   """, {"schema": grant.schema, "table": grant.table})
    ).one()

    grant.columns = columns

register_entities(*my_grants)

if you do decide to do something like that, please let me know how it goes