File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/__pycache__/postgres.cpython-310.pyc
Back
o ;j)` � @ s� d Z ddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl m Z ddl ZddlZddlZddlZddlmZmZ ddlmZ ddlmZ zddlZdZW n eyg dZY nw zdd l m Z W n ey dd lm Z Y nw e� e �Z!d Z"dZ#d Z$d Z%dZ&dZ'e$e%e&e'fZ(ddddddddddddd d d �Z)e*d �Z+d d!d"d#d$d%d&d'�Z,d(d)� Z-d*d+� Z.d�d,d-�Z/ . / d�d0d1�Z0 d�d2d3�Z1 d�d4d5�Z2d�d6d7�Z3d8d9� Z4 d�d:d;�Z5 d�d<d=�Z6 d�d>d?�Z7 d�d@dA�Z8d�dCdD�Z9 d�dEdF�Z: d�dGdH�Z; d�dIdJ�Z< d�dKdL�Z= d�dMdN�Z> d�dOdP�Z? d�dQdR�Z@ d�dSdT�ZA d�dUdV�ZB d�dWdX�ZC d�dYdZ�ZDd�d]d^�ZEe"fd_d`�ZFdadb� ZGdcdd� ZHd�dfdg�ZI \ h d�didj�ZJ h d�dkdl�ZK d�dmdn�ZL h d�dodp�ZM d�dqdr�ZN d�dsdt�ZO d�dudv�ZP d�dwdx�ZQ d�dydz�ZR d�d{d|�ZS d�d}d~�ZTdd�� ZU d�d�d��ZV d�d�d��ZW d�d�d��ZX d�d�d��ZY d�d�d��ZZ d�d�d��Z[ d�d�d��Z\ d�d�d��Z] d�d�d��Z^ d�d�d��Z_ d�d�d��Z` d�d�d��Za d�d�d��Zb d�d�d��Zc d�d�d��Zd d�d�d��Ze d�d�d��Zf d�d�d��Zgd�d�� Zh � d�d�d��Zid�d�� Zjd�d�� Zkd�d�� Zl � d�d�d��Zm � d�d�d��Zn � d�d�d��Zo � d�d�d��Zp . / d�d�d��Zqd�d�� ZrdS )�a� Module to provide Postgres compatibility to salt. :configuration: In order to connect to Postgres, certain configuration is required in /etc/salt/minion on the relevant minions. Some sample configs might look like:: postgres.host: 'localhost' postgres.port: '5432' postgres.user: 'postgres' -> db user postgres.pass: '' postgres.maintenance_db: 'postgres' The default for the maintenance_db is 'postgres' and in most cases it can be left at the default setting. This data can also be passed into pillar. Options passed into opts will overwrite options passed into pillar To prevent Postgres commands from running arbitrarily long, a timeout (in seconds) can be set .. code-block:: yaml postgres.timeout: 60 .. versionadded:: 3006.0 :note: This module uses MD5 hashing which may not be compliant with certain security audits. :note: When installing postgres from the official postgres repos, on certain linux distributions, either the psql or the initdb binary is *not* automatically placed on the path. Add a configuration to the location of the postgres bin's path to the relevant minion for this module:: postgres.bins_dir: '/usr/pgsql-9.5/bin/' � N)� OrderedDict)�CommandExecutionError�SaltInvocationError)�saslprep�� LooseVersionTF)� token_bytes)�urandom�md5zEXTENSION NOT INSTALLEDzEXTENSION INSTALLEDzEXTENSION TO UPGRADEzEXTENSION TO MOVEZINSERTZCREATEZTRUNCATEZCONNECTZTRIGGERZSELECTZUSAGEZ TEMPORARYZUPDATEZEXECUTEZ REFERENCESZDELETEZGRANTZMAINTAIN)�a�C�D�c�t�r�U�T�w�X�x�d�*�m)�schema� tablespace�language�sequence�table�group�database�functionZarwdDxtmr r ZrwUZUCZCTcr )r r r r r r r c C s t sdS td�s dS dS )z� Only load this module if the psql bin exist. initdb bin might also be used, but its presence will be detected on runtime. F�psql)Fzpsql was not foundT)�HAS_CSV�_find_pg_binary� r$ r$ �I/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/postgres.py� __virtual__} s r& c C s> t d d�}|rtjj�tj�|| ��}|r|S tjj�| �S )za .. versionadded:: 2016.3.2 Helper function to locate various psql related binaries � config.optionzpostgres.bins_dir)�__salt__�salt�utils�path�which�os�join)�utilZ pg_bin_dirZutil_binr$ r$ r% r# � s r# c C s� ddt d dtd�d�}|du r3|st d d�}|r |�d �r3d td v r(d }n d td v r1d}nd }|du r9|}|r?||d< |du rIt d d�}|dur�tjjjdd�}tjj�|d��7}|� tjj � d� |rm|�d �rodn||rt|nd|ry|nd|��� t d ||d� d|i|d< W d � n1 s�w Y t d | fddi|��} | � d d �d kr�t�d � |dur�t d |�s�t�d � | S )!z� Helper function to call psql, because the password requirement makes this too much code to be repeated in each function below FTr' �postgres.timeout��default)Zreset_system_locale� clean_env�timeoutN� postgres.host�/�FreeBSD� os_family�postgres�OpenBSD� _postgresql�runasz postgres.pass��textr z {}:{}:*:{}:{}Z localhostr � file.chown� Z PGPASSFILE�env� cmd.run_all� python_shell�retcoder z%Error connecting to Postgresql server� file.removezRemove PGPASSFILE failed)r( � _DEFAULT_COMMAND_TIMEOUT_SECS� startswith� __grains__r) r* �files�mkstemp�fopen�write� stringutils�to_str�format�get�log�error�warning) �cmdr< �password�host�port�user�kwargs� pgpassfile�fp_�retr$ r$ r% � _run_psql� sV �� ��� � r] rU �UTF8c C s� |du rdt d v r d}n dt d v rd}nd}|du r |}td�} | s(td��| d | � �d |� �d |� �d |� �g} |durG| �d |� �� |durU| �d� | �|� |r\| �d� |dur�tjjjdd�} tjj�| d��} | � tjj � |� �� t d | |d� W d � n1 s�w Y | � d| � �g� t|dt d dtd�d�} t�| �}t d |fdd i| ��}|�d d �d kr�t�d � |dur�t d | �s�t�d!� |S )"z( Helper function to call initdb Nr7 r8 r9 r: r; Zinitdbz initdb executable not found.z --pgdata=z --username=z--auth=z --encoding=z --locale=z-Xz--data-checksumsTr= r r? r@ z --pwfile=r' r0 r1 )r< r3 r4 rB rC FrD r z-Error initilizing the postgres data directoryrE z Removal of PGPASSFILE failed)rH r# r �appendr) r* rI rJ rK rL rM rN r( �extend�dictrF �shlexr. rP rQ rR rS )�name�authrX rU �encoding�localer< �waldir� checksumsZ _INITDB_BINrT rZ r[ rY Zcmdstrr\ r$ r$ r% � _run_initdb� sZ � ��� ri c C sT d}t d|d|| |||d�}t|||||| d�}tjj�|d d�D ]} | S dS ) z� Return the version of a Postgres server. CLI Example: .. code-block:: bash salt '*' postgres.version zHSELECT setting FROM pg_catalog.pg_settings WHERE name = 'server_version'�-cz-t)rV rX rW �maintenance_dbrU �r< rU rV rW rX �stdout� N)� _psql_cmdr] r) r* � itertools�split) rX rV rW rk rU r< �queryrT r\ �liner$ r$ r% �version s" � ��rt c C s. t | |||||d�}|rt|�S t�d� dS )z� Returns the server version properly parsed and int casted for internal use. If the Postgres server does not respond, None will be returned. )rV rW rk rU r< zMAttempt to parse version of Postgres server failed. Is the server responding?N)rt r rQ rS )rX rV rW rk rU r< Z psql_versionr$ r$ r% �_parsed_version9 s � �ru c C sL | st d d�} |st d d�}|st d d�}|s t d d�}| |||fS )zz Returns a tuple of (user, host, port, db) with config, pillar, or default values assigned to missing values. r' z postgres.userr5 z postgres.portzpostgres.maintenance_db)r( )rX rV rW rk r$ r$ r% �_connection_defaultsU s rv c O s� t |�d�|�d�|�d�|�d��\}}}}td�}|dddd g}|r*|d |g7 }|r2|d |g7 }|r<|d t|�g7 }|s@d }|�d|g� |�| � |S )z� Return string with fully composed psql command. Accepts optional keyword arguments: user, host, port and maintenance_db, as well as any number of positional arguments to be added to the end of the command. rX rV rW rk r! z --no-alignz --no-readlinez --no-psqlrcz --no-passwordz --usernamez--hostz--portr9 z--dbname)rv rP r# �strr` )�argsrY rX rV rW rk Z _PSQL_BINrT r$ r$ r% ro f s0 �� ro c C s, t | ||||d��}t||||||d�}|S )N)rV rX rW rk rl )ro r] ) rT rV rW rk rU r< rX Zrcmd�cmdretr$ r$ r% �_psql_prepare_and_run� s � �rz c C s� g }d� | �� �d��} |rd� | �} tddd| g||||||d�} | d d kr*|S t�| d �} i } tj| tj j � d �tj j � d �d �D ]} | sJqE| sO| } qE|� t t| | ��� qE|rb|d d� }|S )a� Run an SQL-Query and return the results as a list. This command only supports SELECT statements. This limitation can be worked around with a query like this: WITH updated AS (UPDATE pg_authid SET rolconnlimit = 2000 WHERE rolname = 'rolename' RETURNING rolconnlimit) SELECT * FROM updated; query The query string. user Database username, if different from config or default. host Database host, if different from config or default. port Database port, if different from the config or default. maintenance_db The database to run the query against. password User password, if different from the config or default. runas User to run the command as. write Mark query as READ WRITE transaction. CLI Example: .. code-block:: bash salt '*' postgres.psql_query 'select * from pg_stat_activity' z#COPY ({}) TO STDOUT WITH CSV HEADER�;z5START TRANSACTION READ WRITE; {}; COMMIT TRANSACTION;z-vzdatestyle=ISO,MDYrj �r< rV rX rW rk rU rD r rm �,�")� delimiterZ quotechar���)rO �strip�rstriprz �io�StringIO�csv�readerr) r* rM rN r_ ra �zip)rr rX rV rW rk rU r< rL r\ Z csv_queryry Zcsv_file�header�rowr$ r$ r% � psql_query� sB 0� � � r� c C sJ i }d}t |||| |||d�}|D ]} | || d < || d �d� q|S )z� Return dictionary with information about databases of a Postgres server. CLI Example: .. code-block:: bash salt '*' postgres.db_list a6 SELECT datname as "Name", pga.rolname as "Owner", pg_encoding_to_char(encoding) as "Encoding", datcollate as "Collate", datctype as "Ctype", datacl as "Access privileges", spcname as "Tablespace" FROM pg_database pgd, pg_roles pga, pg_tablespace pgts WHERE pga.oid = pgd.datdba AND pgts.oid = pgd.dattablespacer| �Name)r� �pop� rX rV rW rk rU r< r\ rr �rowsr� r$ r$ r% �db_list� s � � r� c C � t ||||||d�}| |v S )z� Checks if a database exists on the Postgres server. CLI Example: .. code-block:: bash salt '*' postgres.db_exists 'dbname' �rX rV rW rk rU r< )r� )rc rX rV rW rk rU r< Z databasesr$ r$ r% � db_exists s �r� �'c C s6 | d u rd S || v rt d|� d| � ���dj|| d�S )NzUnsupported character z in value: z{quote}{value}{quote})�quote�value)r rO )r� r� r$ r$ r% �_quote_ddl_value> s r� c C s� d| � d�} t dt|d�fdt| d�fd| fdt|�fdt|�fdt| �fg�}g }|�� D ]\}}|d ur=||d |g7 }q.|rM|�d d � | d �|�7 } td| g|||||| d�}|d d kS )z� Adds a databases to the Postgres server. CLI Example: .. code-block:: bash salt '*' postgres.db_create 'dbname' salt '*' postgres.db_create 'dbname' template=template_postgis zCREATE DATABASE "r~ Z TABLESPACEZOWNER�TEMPLATE�ENCODING� LC_COLLATE�LC_CTYPEN�=r � WITH� rj r� rD )r r� �items�insertr. rz )rc rX rV rW rk rU r re Z lc_collateZlc_ctype�owner�templater< rr Z with_argsZ with_chunks�keyr� r\ r$ r$ r% � db_createF s8 �� � � r� c C s� t ||f�sdS |r|rt| |||||| d�} n0g } |r(| �d| � d|� d�� |r6| �d| � d|� d�� | D ]} td| g|||||| d�} q8| d d krPd S dS ) z� Change tablespace or/and owner of database. CLI Example: .. code-block:: bash salt '*' postgres.db_alter dbname owner=otheruser T�rX rV rW rU r< zALTER DATABASE "� " OWNER TO "r~ z" SET TABLESPACE "rj r� rD r F)�any�owner_tor_ rz ) rc rX rV rW rk rU r r� Z owner_recurser< r\ �queriesrr r$ r$ r% �db_alter� s0 �� r� c C s` d| � d�dj | d�d| � d�fD ] }td|g||||||d�}|d d kr-td |� ���qd S ) z� Removes a databases from the Postgres server. CLI Example: .. code-block:: bash salt '*' postgres.db_remove 'dbname' z REVOKE CONNECT ON DATABASE "z" FROM public;zoSELECT pid, pg_terminate_backend(pid) FROM pg_stat_activity WHERE datname = '{db}' AND pid <> pg_backend_pid();)ZdbzDROP DATABASE "�";rj �rX rV rW r< rk rU rD r z Failed: ret=T)rO rz � Exception� rc rX rV rW rk rU r< rr r\ r$ r$ r% � db_remove� s& � �� �r� c C sN i }d}t d |||| |||d�}|D ]} | || d < || d �d� q|S )z� Return dictionary with information about tablespaces of a Postgres server. CLI Example: .. code-block:: bash salt '*' postgres.tablespace_list .. versionadded:: 2015.8.0 z�SELECT spcname as "Name", pga.rolname as "Owner", spcacl as "ACL", spcoptions as "Opts", pg_tablespace_location(pgts.oid) as "Location" FROM pg_tablespace pgts, pg_roles pga WHERE pga.oid = pgts.spcownerzpostgres.psql_queryr| r� )r( r� r� r$ r$ r% �tablespace_list� s �� r� c C r� )z� Checks if a tablespace exists on the Postgres server. CLI Example: .. code-block:: bash salt '*' postgres.tablespace_exists 'dbname' .. versionadded:: 2015.8.0 r� )r� )rc rX rV rW rk rU r< Z tablespacesr$ r$ r% �tablespace_exists s �r� c C st d} d} |r d|� d�} |r dd� |� � D �} d�d�| ��} d�| | || �} td | g|||||| d �}|d d kS ) z� Adds a tablespace to the Postgres server. CLI Example: .. code-block:: bash salt '*' postgres.tablespace_create tablespacename '/path/datadir' .. versionadded:: 2015.8.0 r@ zOWNER "r~ c S s g | ] \}}|� d |� ��qS )z = r$ )�.0�k�vr$ r$ r% � <listcomp>I s z%tablespace_create.<locals>.<listcomp>z WITH ( {} )z, z*CREATE TABLESPACE "{}" {} LOCATION '{}' {}rj r� rD r )r� rO r. rz )rc �location�optionsr� rX rV rW rk rU r< Z owner_queryZ options_queryZ optionstextrr r\ r$ r$ r% �tablespace_create, s( �� r� c C s� t |||| g�s dS g } |r| �d| � d|� d�� |r(| �d| � d|� d�� |r<| �dj| gtt|�� ���R � � | rJ| �d| � d| � d�� | D ]} td | g|||||| d �} | d d krd d S qLdS )a� Change tablespace name, owner, or options. CLI Example: .. code-block:: bash salt '*' postgres.tablespace_alter tsname new_owner=otheruser salt '*' postgres.tablespace_alter index_space new_name=fast_raid salt '*' postgres.tablespace_alter test set_option="{'seq_page_cost': '1.1'}" salt '*' postgres.tablespace_alter tsname reset_option=seq_page_cost .. versionadded:: 2015.8.0 TzALTER TABLESPACE "z " RENAME TO "r~ r� z#ALTER TABLESPACE "{}" SET ({} = {})z " RESET (�)rj r� rD r F)r� r_ rO �next�iterr� rz )rc rX rV rW rk rU �new_nameZ new_ownerZ set_optionZ reset_optionr< r� rr r\ r$ r$ r% �tablespace_alter] s> ���� �r� c C s2 d| � d�}t d|g||||||d�}|d dkS )z� Removes a tablespace from the Postgres server. CLI Example: .. code-block:: bash salt '*' postgres.tablespace_remove tsname .. versionadded:: 2015.8.0 zDROP TABLESPACE "r~ rj r� rD r )rz r� r$ r$ r% �tablespace_remove� s � r� c s\ i }t | |||||d�}|r%|td�krd} nd} |td�kr"d} n d} nt�d� dS � fd d �} d �d | d �d| d�| d�g��| | �} t| ||| |||d�} dd� }| D ]T}i }dD ] }|||�||< q]dD ] }z tj�|| d�||< W qi t y� d||< Y qiw |d |d< � r�|d |d< t t � |d � d�g��d |d< |||d < qW|S ) z� Return a dict with information about users of a Postgres server. Set return_password to True to get password hash in the result. CLI Example: .. code-block:: bash salt '*' postgres.user_list r� z9.1zpg_roles.rolreplicationZNULLz9.5zpg_roles.rolcatupdatezBCould not retrieve Postgres version. Is Postgresql server running?Fc s � r| S dS )Nr@ r$ )�s��return_passwordr$ r% �_x� s zuser_list.<locals>._xr@ a� SELECT pg_roles.rolname as "name",pg_roles.rolsuper as "superuser", pg_roles.rolinherit as "inherits privileges", pg_roles.rolcreaterole as "can create roles", pg_roles.rolcreatedb as "can create databases", {0} as "can update system catalogs", pg_roles.rolcanlogin as "can login", {1} as "replication", pg_roles.rolconnlimit as "connections", (SELECT array_agg(pg_roles2.rolname) FROM pg_catalog.pg_auth_members JOIN pg_catalog.pg_roles pg_roles2 ON (pg_auth_members.roleid = pg_roles2.oid) WHERE pg_auth_members.member = pg_roles.oid) as "groups",pg_roles.rolvaliduntil::timestamp(0) as "expiry time", pg_roles.rolconfig as "defaults variables" zB, COALESCE(pg_shadow.passwd, pg_authid.rolpassword) as "password" zFROM pg_roles z4LEFT JOIN pg_authid ON pg_roles.oid = pg_authid.oid z8LEFT JOIN pg_shadow ON pg_roles.oid = pg_shadow.usesysidr| c S s$ | | dkrdS | | dkrdS dS )zW Returns the boolean value of the key, instead of 't' and 'f' strings. r T�fFNr$ )Zrowdictr� r$ r$ r% �get_bool s zuser_list.<locals>.get_bool)� superuserzinherits privilegeszcan create roleszcan create databaseszcan update system catalogsz can login� replicationZ connections)z expiry timez%Y-%m-%d %H:%M:%SNzdefaults variablesrU �groups�{}r rc )ru r rQ rR r. rO r� �datetime�strptime� ValueError�listr� r� r� )rX rV rW rk rU r< r� r\ �verZreplication_columnZrolcatupdate_columnr� rr r� r� r� �retrowr� Zdate_keyr$ r� r% � user_list� sr � ���� � � "r� c C sD t |||||||d�}z|�| d�W S ty! t�d� Y dS w )z� Return a dict with information about users of a Postgres server. Set return_password to True to get password hash in the result. CLI Example: .. code-block:: bash salt '*' postgres.role_get postgres �rX rV rW rk rU r< r� Nz6Could not retrieve Postgres role. Is Postgres running?)r� rP �AttributeErrorrQ rR ) rc rX rV rW rk rU r< r� Z all_usersr$ r$ r% �role_get4 s � �r� c C s t t| ||||||dd��S )z� Checks if a user exists on the Postgres server. CLI Example: .. code-block:: bash salt '*' postgres.user_exists 'username' Fr� )�boolr� �rc rX rV rW rk rU r< r$ r$ r% � user_existsY s ��r� �NOr@ c C sT |s(|d u r|}|d ur |r| � d|� �} n | � d|� |� �} |r(| � d|� �} | S )Nr� r$ )�string�test�flag�cond�prefix�addtxt�skipr$ r$ r% �_add_role_flagy s r� c C s� |d ur t |�}nd S |du rd}|dvr tdt |� ��|dkr,|�d�s,t|�}|S |dkrA|�d�sAt�d� t| |�}|S |du rJt�d � |S ) NTr )Fr � scram-sha-256z Unknown password algorithm: r� � SCRAM-SHA-256z:The md5 password algorithm was deprecated in PostgreSQL 10Fz3Unencrypted passwords were removed in PostgreSQL 10)rw r� rG �_scram_sha_256rQ rS � _md5_password)�rolerU � encryptedr$ r$ r% �_maybe_encrypt_password� s" � � r� c C s� |dks|du r |� d�r|}||kS t| |�}||kS |dkrT|� d�r+|}||kS t�d|�}|rMt|�d��}t�|�d��}t|||d�}||kS t � }||kS |d u r^|}||kS t � }||kS ) z� Test the given password against the verifier. The given password may already be a verifier, in which case test for simple equality. r Tr� r� z!^SCRAM-SHA-256\$(\d+):([^\$]+?)\$� � )� salt_bytes� iterationsF) rG r� �re�match�intr �base64� b64decoder� �object)r� rU Zverifier�method�expectedr� r� r� r$ r$ r% �_verify_password� s2 �� �� ���r� c C s& d� t�tjj�|� | � ����� �S )Nzmd5{})rO �hashlibr r) r* rM �to_bytes� hexdigest)r� rU r$ r$ r% r� � s ��r� � c C s� |du rt d�}tjj�t| ��} t�d| ||�}t� |dd�� � }t� |�� � }t� |dd�� � }d� |t �|��d�t �|��d�t �|��d��S )zw Build a SCRAM-SHA-256 password verifier. Ported from https://doxygen.postgresql.org/scram-common_8c.html N� �sha256s Client Keys Server KeyzSCRAM-SHA-256${}:{}${}:{}�ascii)r r) r* rM r� r r� � pbkdf2_hmac�hmac�new�digestr� rO r� � b64encode�decode)rU r� r� Zsalted_passwordZ stored_keyZ server_keyr$ r$ r% r� � s �r� r� c C s� |d u r |dv r d}|d u r|dkrd}|dkrd}|d u r t }d}d}d}| d ur3t| t�r3t| �s:t| t�s:d}t| t�rQt| �rQd�t| | �dd �|d ��}t| t�rct| �rcd�| �dd ��}d}t|�rut| �t|d �krud}d |d �d|d �d|d �d| |d�d| d �d|d �dt|�t|�|d u d�d|d uo�t| �|p�t| t�t|�dd�dt| �||d�dt| �| d u |d�f }|D ] }t|fi |��}q�|�d �r�|�d d�}| r�t| t �r�d � | �} | � d �D ] }|� d |� d | � d!�}q�|S )"N)rX r TrX r Fr@ z'{}'r� z'')r� r� ZINHERIT)r� r� ZCREATEDBZ CREATEROLEZ SUPERUSER)r� r� r� Z REPLICATIONZLOGINzCONNECTION LIMIT)r� r� r� r� Z ENCRYPTEDZUN)r� r� r� r� r� ZPASSWORD)r� r� r� r� z VALID UNTIL�WITHr� r} z ; GRANT "z" TO "r~ ) � _DEFAULT_PASSWORDS_ENCRYPTION� isinstancerw r� rO r� �replacer� �endswithr� r. rq )rc �sub_cmd�typ_r� �login� connlimit�inherit�createdb� createrolesr� r� r� � rolepassword� valid_until�db_roleZ skip_passwdZescaped_passwordZescaped_valid_untilZskip_superuser�flags�datar r$ r$ r% �_role_cmd_args� s� ����� � � ����! r c C s� t | ||||||d�rt�d|�� | � dS d| � d�}d�|t| ||| | | ||| || ||d� �}td|g||||||d �}|d d kS ) z| Creates a Postgres role. Users and Groups are both roles in postgres. However, users can login, groups cannot. �rU r< z%s '%s' already existsFz CREATE ROLE "�" WITH�{} {}) r r� r r r r r r� r� r� r r rj r| rD r )r� rQ �info� capitalizerO r rz )rc rX rV rW rk rU r r r� r� r r r r� r r r r� r< r r\ r$ r$ r% � _role_create< sD � ��� r c C sx t | fi dd�d|�d|�d|�d|�d|�d|�d|�d |�d | �d | �d | �d | �d| �d|�d|�d|�d|��S )a Creates a Postgres user. CLI Examples: .. code-block:: bash salt '*' postgres.user_create 'username' user='user' \ host='hostname' port='port' password='password' \ rolepassword='rolepassword' valid_until='valid_until' r rX rV rW rk rU r r r r r r� r� r� r r r� r< �r )�usernamerX rV rW rk rU r r r r r r� r� r� r r r� r< r$ r$ r% � user_create} �N �������� � � � � �������r c C s� t | ||||||dd�}t|�st�d|�� | � dS d| � d�}d�|t| | | | | ||| |||||d� �}td|g||||||d �}|d d kS ) z" Updates a postgres role. Fr� z%s '%s' could not be foundz ALTER ROLE "r r ) r� r r r r r r� r� r� r r r rj r| rD r )r� r� rQ r r rO r rz )rc rX rV rW rk rU r r r r r r r� r� r� r r r� r< r� r r\ r$ r$ r% � _role_update� sT � ��� r c C sx t | fi d|�d|�d|�d|�d|�dd�d| �d| �d | �d |�d |�d |�d | �d| �d|�d|�d|�d|��S )a Updates a Postgres user. CLI Examples: .. code-block:: bash salt '*' postgres.user_update 'username' user='user' \ host='hostname' port='port' password='password' \ rolepassword='rolepassword' valid_until='valid_until' rX rV rW rk rU r r r r r r r� r� r� r r r� r< �r )r rX rV rW rk rU r r r� r� r r r r� r r r� r< r$ r$ r% � user_update� r r c C sv t | ||||||d�st�d| � dS d| � d�}td|g||||||d� t | ||||||d�s3dS t�d | � dS ) z1 Removes a role from the Postgres Server r zUser '%s' does not existFz DROP ROLE "r~ rj r| TzFailed to delete user '%s'.)r� rQ r rz )rc rX rV rW rk rU r< r r$ r$ r% � _role_remove1 s* � � � r c C �L g }d}t || |||||d�}i }|D ]} d| v r#d| v r#| || d < q|S )z� List available postgresql extensions CLI Example: .. code-block:: bash salt '*' postgres.available_extensions z(select * from pg_available_extensions();r� Zdefault_versionrc �r� � rX rV rW rk rU r< �extsrr r\ r� r$ r$ r% �available_extensionsZ s" � �r# c C r )z� List installed postgresql extensions CLI Example: .. code-block:: bash salt '*' postgres.installed_extensions zgselect a.*, b.nspname as schema_name from pg_extension a, pg_namespace b where a.extnamespace = b.oid;r� � extversionZextnamer r! r$ r$ r% �installed_extensionsy s$ �� �r% c C � t ||||||d��| d�S )z� Get info about an available postgresql extension CLI Example: .. code-block:: bash salt '*' postgres.get_available_extension plpgsql r� N)r# rP r� r$ r$ r% �get_available_extension� � ��r' c C r& )z� Get info about an installed postgresql extension CLI Example: .. code-block:: bash salt '*' postgres.get_installed_extension plpgsql r� N)r% rP r� r$ r$ r% �get_installed_extension� r( r) c C s2 t ||||||d�}| �� dd� |D �v rdS dS )z� Test if a specific extension is available CLI Example: .. code-block:: bash salt '*' postgres.is_available_extension r� c S s g | ]}|� � �qS r$ )�lower)r� r r$ r$ r% r� � � z*is_available_extension.<locals>.<listcomp>TF)r# r* )rc rX rV rW rk rU r< r" r$ r$ r% �is_available_extension� s �r, c C s t | �t |�k S )z� Compare versions of extensions using `looseversion.LooseVersion`. Returns ``True`` if version a is lesser than b. r )r �br$ r$ r% �_pg_is_older_ext_ver� s r. c C s t | ||||||d�}t|�S )z� Test if a specific extension is installed CLI Example: .. code-block:: bash salt '*' postgres.is_installed_extension r� )r) r� )rc rX rV rW rk rU r< � installed_extr$ r$ r% �is_installed_extension� s � r0 c C s� t | ||||||d�} tg} | r>tg} |dur%t| �d|�|�r%| �t� |dur>| �dd�dkr>| �d|�|kr>| �t� | S )z� Get lifecycle information about an extension CLI Example: .. code-block:: bash salt '*' postgres.create_metadata adminpack r� Nr$ Zextrelocatabler� r Z schema_name)r) �_EXTENSION_NOT_INSTALLED�_EXTENSION_INSTALLEDr. rP r_ �_EXTENSION_TO_UPGRADE�_EXTENSION_TO_MOVE) rc � ext_versionr rX rV rW rk rU r< r/ r\ r$ r$ r% �create_metadata s* � � r6 c C s� |du rd}|du r d}|du rd}dg} |r | � d� | � | � |r(| � d� |r/| � d� | � d� d �| �} t| |||||| d �rQtd | g| |||||d � t| |||||| d � } | set�d | � | S )z� Drop an installed postgresql extension CLI Example: .. code-block:: bash salt '*' postgres.drop_extension 'adminpack' NTFzDROP EXTENSIONz IF EXISTSZCASCADEZRESTRICTr{ r� r� rj r| zFailed to drop ext: %s)r_ r. r0 rz rQ r ) rc Z if_existsZrestrictZcascaderX rV rW rk rU r< rx rT r\ r$ r$ r% �drop_extensionK s\ � � � r7 c C s� |du rd}t | ||||||| | d� } t| v} t| ||||| | d�} | r�| ssdg}|r0|�d� |�d| � d�� g }|rF|�d|� d�� |rP|�d |� �� |rZ|�d |� �� |rf|�d � |�|� |�d � d �|��� }n-g }|r�t| v r�|�d| � d|� d�� |r�t| v r�|�d| � d|� d �� d �|��� }|r�t d|g| ||||| d� t | ||||||| | d� } d}t D ] }|| v r�|t kr�d}q�|s�t � d| � |S )z� Install a postgresql extension CLI Example: .. code-block:: bash salt '*' postgres.create_extension 'adminpack' NT)r5 r rX rV rW rk rU r< r� zCREATE EXTENSIONz IF NOT EXISTSr~ zSCHEMA "zVERSION zFROM r� r{ r� zALTER EXTENSION "z" SET SCHEMA "r� z " UPDATE TO rj r| FzFailed to create ext: %s)r6 r1 r, r_ r` r. r� r4 r3 rz �_EXTENSION_FLAGSr2 rQ r )rc Z if_not_existsr r5 Z from_versionrX rV rW rk rU r< ZmtdataZ installedZ installablerx ZsargsrT r\ �ir$ r$ r% �create_extension� s� � � � � � r: c C � t | ||||||d�S )z� Removes a user from the Postgres server. CLI Example: .. code-block:: bash salt '*' postgres.user_remove 'username' r� �r )r rX rV rW rk rU r< r$ r$ r% � user_remove� � �r= c C sl t | fi d|�dd�d|�d|�d|�d|�d|�d |�d |�d | �d | �d | �d| �d| �d|�d|��S )a? Creates a Postgres group. A group is postgres is similar to a user, but cannot login. CLI Example: .. code-block:: bash salt '*' postgres.group_create 'groupname' user='user' \ host='hostname' port='port' password='password' \ rolepassword='rolepassword' rX r r rV rW rk rU r r r� r r r� r� r r� r< r )� groupnamerX rV rW rk rU r r r� r r r� r� r r� r< r$ r$ r% � group_create sF �������� � � � � �����r@ c C sl t | fi d|�d|�d|�d|�d|�d|�dd�d |�d |�d | �d | �d | �d| �d| �d|�d|��S )z� Updates a postgres group CLI Examples: .. code-block:: bash salt '*' postgres.group_update 'username' user='user' \ host='hostname' port='port' password='password' \ rolepassword='rolepassword' rX rV rW rk rU r r r r r� r r r� r� r r� r< r )r? rX rV rW rk rU r r r� r r r� r� r r� r< r$ r$ r% � group_updateI sF �������� � � � � �����rA c C r; )z� Removes a group from the Postgres server. CLI Example: .. code-block:: bash salt '*' postgres.group_remove 'groupname' r� r< )r? rX rV rW rk rU r< r$ r$ r% � group_remove{ r> rB c C s� t �� }|�d� |�d| � d|� d�� d}|D ]"\} } t| |||| ||d�} | D ]} |�| j|| d d�d � q*q|�d � |�� t�|jd � t d |jg|||||| d �} | S )z� Set the owner of all schemas, functions, tables, views and sequences to the given username. CLI Example: .. code-block:: bash salt '*' postgres.owner_to 'dbname' 'username' zbegin; zalter database "z " owner to "z"; ))z"alter schema {n} owner to {owner};zFselect quote_ident(schema_name) as n from information_schema.schemata;)z!alter table {n} owner to {owner};z�select quote_ident(table_schema)||'.'||quote_ident(table_name) as n from information_schema.tables where table_schema not in ('pg_catalog', 'information_schema');)z$alter function {n} owner to {owner};z�select p.oid::regprocedure::text as n from pg_catalog.pg_proc p join pg_catalog.pg_namespace ns on p.pronamespace=ns.oid where ns.nspname not in ('pg_catalog', 'information_schema') and not p.proisagg;)z%alter aggregate {n} owner to {owner};z�select p.oid::regprocedure::text as n from pg_catalog.pg_proc p join pg_catalog.pg_namespace ns on p.pronamespace=ns.oid where ns.nspname not in ('pg_catalog', 'information_schema') and p.proisagg;)z$alter sequence {n} owner to {owner};zlselect quote_ident(sequence_schema)||'.'||quote_ident(sequence_name) as n from information_schema.sequences;r� �n)r� rC rn zcommit; i� z-f)rX r< rV rW rU rk ) �tempfileZNamedTemporaryFilerL r� rO �flushr- �chmodrc rz )�dbnameZ ownernamerX rV rW rU r< Zsqlfiler� �fmtrr r\ r� ry r$ r$ r% r� � s< %� � � r� c C sr t | ||||||d�rt�d|| � dS d|� d�}|dur&|� d|� d�}td|g||||| |d �} | d d kS ) a Creates a Postgres schema. CLI Example: .. code-block:: bash salt '*' postgres.schema_create dbname name owner='owner' \ user='user' \ db_user='user' db_password='password' db_host='hostname' db_port='port' �rX �db_user� db_password�db_host�db_portz'%s' already exists in '%s'FzCREATE SCHEMA "r~ Nz AUTHORIZATION "rj )rX rU rW rV rk r< rD r �� schema_existsrQ r rz ) rG rc r� rX rJ rK rL rM r r\ r$ r$ r% � schema_create� s0 � � rP c C sx t | |d||||d�st�d|| � dS d|� d�}td|g|| ||||d� t | ||||||d �s4d S t�d |� dS ) as Removes a schema from the Postgres server. CLI Example: .. code-block:: bash salt '*' postgres.schema_remove dbname schemaname dbname Database name we work on schemaname The schema's name we'll remove user System user all operations should be performed on behalf of db_user database username if different from config or default db_password user password if any password for a specified user db_host Database host if different from config or default db_port Database port if different from config or default NrI z"Schema '%s' does not exist in '%s'Fz DROP SCHEMA "r~ rj )r< rk rV rX rW rU )rJ rK rL rM Tz Failed to delete schema '%s'.rN )rG rc rX rJ rK rL rM r r$ r$ r% � schema_remove% sB $� � � rQ c C s t t| ||||||d��S )ap Checks if a schema exists on the Postgres server. CLI Example: .. code-block:: bash salt '*' postgres.schema_exists dbname schemaname dbname Database name we query on name Schema name we look for user The system user the operation should be performed on behalf of db_user database username if different from config or default db_password user password if any password for a specified user db_host Database host if different from config or default db_port Database port if different from config or default �rX rJ rL rM rK )r� � schema_get)rG rc rX rJ rK rL rM r$ r$ r% rO p s "��rO c C sB t | |||||d�}z|�|d�W S ty t�d� Y dS w )ap Return a dict with information about schemas in a database. CLI Example: .. code-block:: bash salt '*' postgres.schema_get dbname name dbname Database name we query on name Schema name we look for user The system user the operation should be performed on behalf of db_user database username if different from config or default db_password user password if any password for a specified user db_host Database host if different from config or default db_port Database port if different from config or default rR Nz8Could not retrieve Postgres schema. Is Postgres running?F)� schema_listrP r� rQ rR )rG rc rX rJ rK rL rM Z all_schemasr$ r$ r% rS � s !� �rS c C sZ i }d� dg�}t|||||| |d�}|D ]} i } dD ]} | | | | < q| || d < q|S )aL Return a dict with information about schemas in a Postgres database. CLI Example: .. code-block:: bash salt '*' postgres.schema_list dbname dbname Database name we query on user The system user the operation should be performed on behalf of db_user database username if different from config or default db_password user password if any password for a specified user db_host Database host if different from config or default db_port Database port if different from config or default r@ z�SELECT pg_namespace.nspname as "name",pg_namespace.nspacl as "acl", pg_roles.rolname as "owner" FROM pg_namespace LEFT JOIN pg_roles ON pg_roles.oid = pg_namespace.nspowner r| )r� Zaclrc )r. r� ) rG rX rJ rK rL rM r\ rr r� r� r� r� r$ r$ r% rT � s( �� � rT c C s< i }d}t |||||| |d�}|D ] } | d || d < q|S )aI .. versionadded:: 2016.3.0 Return a list of languages in a database. CLI Example: .. code-block:: bash salt '*' postgres.language_list dbname maintenance_db The database to check user database username if different from config or default password user password if any password for a specified user host Database host if different from config or default port Database port if different from config or default runas System user all operations should be performed on behalf of z)SELECT lanname AS "Name" FROM pg_languager| r� r ) rk rX rV rW rU r< r\ rr r� r� r$ r$ r% � language_list s !� rU c C r� )a} .. versionadded:: 2016.3.0 Checks if language exists in a database. CLI Example: .. code-block:: bash salt '*' postgres.language_exists plpgsql dbname name Language to check for maintenance_db The database to check in user database username if different from config or default password user password if any password for a specified user host Database host if different from config or default port Database port if different from config or default runas System user all operations should be performed on behalf of r� )rU )rc rk rX rV rW rU r< � languagesr$ r$ r% �language_existsB s % �rW c C sL t | |�rt�d| |� dS d| � �}td|g||||||d�}|d dkS )a� .. versionadded:: 2016.3.0 Installs a language into a database CLI Example: .. code-block:: bash salt '*' postgres.language_create plpgsql dbname name Language to install maintenance_db The database to install the language in user database username if different from config or default password user password if any password for a specified user host Database host if different from config or default port Database port if different from config or default runas System user all operations should be performed on behalf of z Language %s already exists in %sFzCREATE LANGUAGE rj r� rD r �rW rQ r rz � rc rk rX rV rW rU r< rr r\ r$ r$ r% �language_createn � $ � rZ c C sL t | |�st�d| |� dS d| � �}td|g||||||d�}|d dkS )a� .. versionadded:: 2016.3.0 Removes a language from a database CLI Example: .. code-block:: bash salt '*' postgres.language_remove plpgsql dbname name Language to remove maintenance_db The database to install the language in user database username if different from config or default password user password if any password for a specified user host Database host if different from config or default port Database port if different from config or default runas System user all operations should be performed on behalf of z Language %s does not exist in %sFzDROP LANGUAGE rj r� rD r rX rY r$ r$ r% �language_remove� r[ r\ c C s |dkrd� g d���|| �}|S |dkr"d� g d���|| �}|S |dkr2d� g d���| �}|S |dkrCd� g d ���|| �}|S |d krSd� g d ���| �}|S |d krcd� g d ���| �}|S |dkrsd� g d���| �}|S |dkr�d� g d���| �}|S )z< Generate the SQL required for specific object type r r� )�SELECT relacl AS name�FROM pg_catalog.pg_class c� JOIN pg_catalog.pg_namespace n�ON n.oid = c.relnamespace�WHERE nspname = '{0}'�AND relname = '{1}'zAND relkind in ('r', 'v')�ORDER BY relnamer )r] r^ r_ r` ra rb zAND relkind = 'S'rc r )zSELECT nspacl AS namez FROM pg_catalog.pg_namespacera zORDER BY nspnamer )zSELECT proacl AS name�FROM pg_catalog.pg_proc pr_ �ON n.oid = p.pronamespacera �%AND p.oid::regprocedure::text = '{1}'� ORDER BY proname, proargtypesr )zSELECT spcacl AS namez FROM pg_catalog.pg_tablespace�WHERE spcname = '{0}'zORDER BY spcnamer )zSELECT lanacl AS namezFROM pg_catalog.pg_language�WHERE lanname = '{0}'zORDER BY lannamer )zSELECT datacl AS namezFROM pg_catalog.pg_database�WHERE datname = '{0}'zORDER BY datnamer ) z SELECT rolname, admin_optionz!FROM pg_catalog.pg_auth_members m�JOIN pg_catalog.pg_roles rzON m.member=r.oidzWHERE m.roleid INz (SELECT oidzFROM pg_catalog.pg_roleszWHERE rolname='{0}')zORDER BY rolname)r. rO )rc � object_type�prependrr r$ r$ r% �_make_privileges_list_query� sp � �h�� �Y���J�� �?���1���&����� �rn �publicc C s |dkrd� g d���|| �} n[|dkr d� g d���|| �} nK|dkr/d� g d���| �} n<|dkr?d� g d ���|| �} n,|d krNd� g d ���| �} n |d kr]d� g d ���| �} n|dkrkd� g d���| �} t| ||||||d�} z | d d } W | S ty� d} Y | S w )z/ Return the owner of a postgres object r r� )zSELECT tableowner AS namezFROM pg_tableszWHERE schemaname = '{0}'zAND tablename = '{1}'r ) �SELECT rolname AS namer^ �JOIN pg_roles rzON c.relowner = r.oidr_ r` zWHERE relkind='S'zAND nspname='{0}'rb r )rp zFROM pg_namespace nrq zON n.nspowner = r.oidra r ) rp rd r_ re rk zON p.proowner = r.oidra rf rg r )rp zFROM pg_tablespace trq zON t.spcowner = r.oidrh r )rp zFROM pg_language lrq zON l.lanowner = r.oidri r )rp zFROM pg_database drq zON d.datdba = r.oidrj r| r rc N)r. rO r� � IndexError) rc rl rm rk rX rV rW rU r< rr r� r\ r$ r$ r% �_get_object_ownerL st �� � �� � � �� � � � � � � ��rs c C sr | dkr1dd� t | D �}|�d� | tvr td| � d���t|��t|��s/td�|| ���d S |r7td��d S ) z* Validate the supplied privileges r c S � g | ]}t | �qS r$ ��_PRIVILEGES_MAP�r� �permr$ r$ r% r� � r+ z(_validate_privileges.<locals>.<listcomp>�ALL�Invalid object_type: � providedz/Invalid privilege(s): {} provided for object {}z=The privileges option should not be set for object_type groupN)�_PRIVILEGE_TYPE_MAPr_ �_PRIVILEGES_OBJECTSr �set�issubsetrO )rl Zprivs� privileges�_permsr$ r$ r% �_validate_privileges� s" �����r� c C s2 | � � } |du r dn|}t�d|�� �}| ||fS )z Format options Nr@ z\s?,\s?)r* r� rq �upper)rl r� �_privsr$ r$ r% �_mod_priv_opts� s r� c C sZ i }d}| D ]$}|du rd|t | < t | }q|dkr d||< qd|t | < t | }q|S )z Process part NFr Tru )�perms�_tmpZpreviousrx r$ r$ r% �_process_priv_part� s r� c C s� |� � }t| ||�} |tvrtd|� d���t| ||||||d�} i } | D ]G} |dkr[| d } | �d�} | �d�}|D ] }|�d�\}}|�d �\}}|d krQd }t|�}|| |< q;q%| d d krdd}nd}|| | d < q%| S )aH .. versionadded:: 2016.3.0 Return a list of privileges for the specified object. CLI Example: .. code-block:: bash salt '*' postgres.privileges_list table_name table maintenance_db=db_name name Name of the object for which the permissions should be returned object_type The object type, which can be one of the following: - table - sequence - schema - tablespace - language - database - group - function prepend Table and Sequence object types live under a schema so this should be provided if the object is not under the default `public` schema maintenance_db The database to connect to user database username if different from config or default password user password if any password for a specified user host Database host if different from config or default port Database port if different from config or default runas System user all operations should be performed on behalf of rz r{ r| r rc r� r} r6 r� r@ ro � admin_optionr TFZrolname)r* rn r} r r� r� rq r� )rc rl rm rk rX rV rW rU r< rr r� r\ r� �result�parts�partZ perms_part�_Zrolenamer� r� r� r$ r$ r% �privileges_list� s@ ; � � r� c C s t ||�\}}} t|| |� |dkr)t||||||| | | d� } | dur)| | kr)dS t||||||| | | d� }| |v r�|dkrJ|rF|| }|S d}|S t| }|r_dd� |D �}||| k}|S dd� |D �}d | v rvt|�t|| �k}|S t| ��t|| ��}|S d S ) aQ .. versionadded:: 2016.3.0 Check if a role has the specified privileges on an object CLI Example: .. code-block:: bash salt '*' postgres.has_privileges user_name table_name table \ SELECT,INSERT maintenance_db=db_name name Name of the role whose privileges should be checked on object_type object_name Name of the object on which the check is to be performed object_type The object type, which can be one of the following: - table - sequence - schema - tablespace - language - database - group - function privileges Comma separated list of privileges to check, from the list below: - INSERT - CREATE - TRUNCATE - CONNECT - TRIGGER - SELECT - USAGE - TEMPORARY - UPDATE - EXECUTE - REFERENCES - DELETE - ALL grant_option If grant_option is set to True, the grant option check is performed prepend Table and Sequence object types live under a schema so this should be provided if the object is not under the default `public` schema maintenance_db The database to connect to user database username if different from config or default password user password if any password for a specified user host Database host if different from config or default port Database port if different from config or default runas System user all operations should be performed on behalf of r �rm rk rX rV rW rU r< NTc S s i | ]}t | d �qS )Tru rw r$ r$ r% � <dictcomp>� s z"has_privileges.<locals>.<dictcomp>c S rt r$ ru rw r$ r$ r% r� � r+ z"has_privileges.<locals>.<listcomp>ry F)r� r� rs r� r| �sortedr~ r )rc � object_namerl r� � grant_optionrm rk rX rV rW rU r< r� r� Z _privileges�retvalr� r� r$ r$ r% �has_privilegesa s\ V � � � ��r� c C sn t ||�\}}} t|| |� t| |||||||| | | d� r't�d|||� dS d�| �} |dv r9|� d|� d�}n|dkrA|� }nd|� d�}|rw|d krWd |� d | � d �}nM|dv rl|�� d krld�| |�� || �}n8d�| |�� || �}n-|d kr�d |� d | � d�}n |dv r�|�� d kr�d�| |�� || �}n d�| |�� || �}td|g||| || | d�}|d dkS )aU .. versionadded:: 2016.3.0 Grant privileges on a postgres object CLI Example: .. code-block:: bash salt '*' postgres.privileges_grant user_name table_name table \ SELECT,UPDATE maintenance_db=db_name name Name of the role to which privileges should be granted object_name Name of the object on which the grant is to be performed object_type The object type, which can be one of the following: - table - sequence - schema - tablespace - language - database - group - function privileges Comma separated list of privileges to grant, from the list below: - INSERT - CREATE - TRUNCATE - CONNECT - TRIGGER - SELECT - USAGE - TEMPORARY - UPDATE - EXECUTE - REFERENCES - DELETE - ALL grant_option If grant_option is set to True, the recipient of the privilege can in turn grant it to others prepend Table and Sequence object types live under a schema so this should be provided if the object is not under the default `public` schema maintenance_db The database to connect to user database username if different from config or default password user password if any password for a specified user host Database host if different from config or default port Database port if different from config or default runas System user all operations should be performed on behalf of r� z9The object: %s of type: %s already has privileges: %s setFr} �r r z."r~ r r zGRANT z TO "z" WITH ADMIN OPTIONry z:GRANT {} ON ALL {}S IN SCHEMA {} TO "{}" WITH GRANT OPTIONz+GRANT {} ON {} {} TO "{}" WITH GRANT OPTIONz(GRANT {} ON ALL {}S IN SCHEMA {} TO "{}"zGRANT {} ON {} {} TO "{}"rj r� rD r ) r� r� r� rQ r r. r� rO rz )rc r� rl r� r� rm rk rX rV rW rU r< r� �_grants�on_partrr r\ r$ r$ r% �privileges_grant� sr W � � � � � �� r� c C s� t ||�\}}} t|| |� t| ||||||||| | d� s't�d|||� dS d�| �} |dv r8|� d|� �} n|} |dkrGd|� d | � �}n d �| |�� | | �}td |g||||| | d �}|d dkS )a3 .. versionadded:: 2016.3.0 Revoke privileges on a postgres object CLI Example: .. code-block:: bash salt '*' postgres.privileges_revoke user_name table_name table \ SELECT,UPDATE maintenance_db=db_name name Name of the role whose privileges should be revoked object_name Name of the object on which the revoke is to be performed object_type The object type, which can be one of the following: - table - sequence - schema - tablespace - language - database - group - function privileges Comma separated list of privileges to revoke, from the list below: - INSERT - CREATE - TRUNCATE - CONNECT - TRIGGER - SELECT - USAGE - TEMPORARY - UPDATE - EXECUTE - REFERENCES - DELETE - ALL maintenance_db The database to connect to user database username if different from config or default password user password if any password for a specified user host Database host if different from config or default port Database port if different from config or default runas System user all operations should be performed on behalf of r� z;The object: %s of type: %s does not have privileges: %s setFr} r� �.r zREVOKE z FROM zREVOKE {} ON {} {} FROM {}rj r� rD r ) r� r� r� rQ r r. rO r� rz )rc r� rl r� rm rk rX rV rW rU r< r� r� r� rr r\ r$ r$ r% �privileges_revoke� sR N � � �� r� c C s> t | �r t�d| � dS t| ||||||||d� } | d dkS )a� .. versionadded:: 2016.3.0 Initializes a postgres data directory CLI Example: .. code-block:: bash salt '*' postgres.datadir_init '/var/lib/pgsql/data' name The name of the directory to initialize auth The default authentication method for local connections password The password to set for the postgres user user The database superuser name encoding The default encoding for new databases locale The default locale for new databases waldir The transaction log (WAL) directory (default is to keep WAL inside the data directory) .. versionadded:: 2019.2.0 checksums If True, the cluster will be created with data page checksums. .. note:: Data page checksums are supported since PostgreSQL 9.3. .. versionadded:: 2019.2.0 runas The system user the operation should be performed on behalf of z%s already existsF)rd rX rU re rf rg rh r< rD r )�datadir_existsrQ r ri ) rc rd rX rU re rf rg rh r< r\ r$ r$ r% � datadir_init s 9 � r� c C s4 t j�| d�}t j�| d�}t j�|�ot j�|�S )z� .. versionadded:: 2016.3.0 Checks if postgres data directory has been initialized CLI Example: .. code-block:: bash salt '*' postgres.datadir_exists '/var/lib/pgsql/data' name Name of the directory to check Z PG_VERSIONzpostgresql.conf)r- r+ r. �isfile)rc Z _version_fileZ _config_filer$ r$ r% r� W s r� )NNNNN)rU NNr^ NNNF)NNNNNN)NNNN)NNNNNNF)r� ) NNNNNNNNNNNN) NNNNNNNFN)NNNNNNNN) NNNNNNNNNN)Nr� r@ F)Nr� )r@ r� NNNNNNNNNNNN)NNNNNNNNNNNNNNNr� NN)NNNNNNNNNNNNNNNNN)NNNNNNr� NNNNNNNNNNN) NNNNNNNNN)NNNNNNNNNNNNNNN)ro NNNNNN) NNro NNNNNN)Nro NNNNNN)rU NNr^ NNFN)s�__doc__r� r� r� r� r� �loggingr- r� rb rD � collectionsr Zsalt.utils.filesr) Zsalt.utils.itertoolsZsalt.utils.pathZsalt.utils.stringutilsZsalt.exceptionsr r Zsalt.ext.saslprepr Zsalt.utils.versionsr r� r" � ImportErrorZsecretsr r � getLogger�__name__rQ r rF r1 r2 r3 r4 r8 rv � frozensetr} r| r& r# r] ri rt ru rv ro rz r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r r r# r% r' r) r, r. r0 r6 r7 r: r= r@ rA rB r� rP rQ rO rS rT rU rW rZ r\ rn rs r� r� r� r� r� r� r� r� r� r$ r$ r$ r% �<module> s� % � � ��� � ; �J �! � $ � �b �+ � �D �5 �* �* �# �3 �? �% �x �' � ! �c �C �8 �J �8 �* � �$ � � � �! �0 �H �g �" �5 �4 � �[ �6 �L �0 �1 �@ �5 �- �8 �7s �{ �h � � " � � K
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings