Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

pgstac_read role does not have read access to collections table #146

Open
jtherrmann opened this issue Nov 11, 2022 · 0 comments
Open

pgstac_read role does not have read access to collections table #146

jtherrmann opened this issue Nov 11, 2022 · 0 comments

Comments

@jtherrmann
Copy link

According to https://stac-utils.github.io/pgstac/pgstac/#pgstac-users:

The pgstac_read role has read only access to the items and collections, but will still be able to write to the logging tables.

However, when I run the following query:

select * from information_schema.table_privileges where grantee='pgstac_read';

It appears that the pgstac_read user only has the SELECT privilege for all of the _items_* tables, but not the collections table. This results in a permissions denied error when attempting to query the /collections/* endpoints via the API.

After granting the appropriate permissions with:

GRANT SELECT ON pgstac.collections TO pgstac_read;

The /collections/* endpoints can now be queried successfully.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant