{"action":"created","issue":{"url":"https://api.github.com/repos/ansible/ansible/issues/15794","repository_url":"https://api.github.com/repos/ansible/ansible","labels_url":"https://api.github.com/repos/ansible/ansible/issues/15794/labels{/name}","comments_url":"https://api.github.com/repos/ansible/ansible/issues/15794/comments","events_url":"https://api.github.com/repos/ansible/ansible/issues/15794/events","html_url":"https://github.com/ansible/ansible/issues/15794","id":153857496,"node_id":"MDU6SXNzdWUxNTM4NTc0OTY=","number":15794,"title":"postgresql_user only grants, does not revoke except on role/user deletion","user":{"login":"Habbie","id":525838,"node_id":"MDQ6VXNlcjUyNTgzOA==","avatar_url":"https://avatars1.githubusercontent.com/u/525838?v=4","gravatar_id":"","url":"https://api.github.com/users/Habbie","html_url":"https://github.com/Habbie","followers_url":"https://api.github.com/users/Habbie/followers","following_url":"https://api.github.com/users/Habbie/following{/other_user}","gists_url":"https://api.github.com/users/Habbie/gists{/gist_id}","starred_url":"https://api.github.com/users/Habbie/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Habbie/subscriptions","organizations_url":"https://api.github.com/users/Habbie/orgs","repos_url":"https://api.github.com/users/Habbie/repos","events_url":"https://api.github.com/users/Habbie/events{/privacy}","received_events_url":"https://api.github.com/users/Habbie/received_events","type":"User","site_admin":false},"labels":[{"id":437720458,"node_id":"MDU6TGFiZWw0Mzc3MjA0NTg=","url":"https://api.github.com/repos/ansible/ansible/labels/affects_2.0","name":"affects_2.0","color":"5319e7","default":false},{"id":785271699,"node_id":"MDU6TGFiZWw3ODUyNzE2OTk=","url":"https://api.github.com/repos/ansible/ansible/labels/bug","name":"bug","color":"fbca04","default":true},{"id":496359346,"node_id":"MDU6TGFiZWw0OTYzNTkzNDY=","url":"https://api.github.com/repos/ansible/ansible/labels/module","name":"module","color":"1d76db","default":false},{"id":636327968,"node_id":"MDU6TGFiZWw2MzYzMjc5Njg=","url":"https://api.github.com/repos/ansible/ansible/labels/support:community","name":"support:community","color":"ededed","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":7,"created_at":"2016-05-09T20:04:06Z","updated_at":"2018-12-24T10:58:02Z","closed_at":null,"author_association":"NONE","body":"##### ISSUE TYPE\r\nBug Report\r\n\r\n##### COMPONENT NAME\r\npostgres_user module\r\n\r\n##### ANSIBLE VERSION\r\n```\r\nansible 2.0.2.0\r\nconfig file =\r\nconfigured module search path = Default w/o overrides\r\n```\r\n\r\n##### CONFIGURATION\r\nno ansible.cfg no environment variables\r\n\r\n##### OS / ENVIRONMENT\r\nrunning ansible from osx (via brew) target is Debian 8 with postgres 8.4\r\n\r\n##### SUMMARY\r\nwhile postgres_user allows one to grant privs to a user, it does not appear to revoke privs no\r\n\r\n##### STEPS TO REPRODUCE\r\n\r\n\r\n##### EXPECTED RESULTS\r\n\r\n\r\n##### ACTUAL RESULTS\r\nI tried to use postgresql_user to limit PUBLIC access to a database, but nothing happened (not even a SELECT to see if anything had to happen). It is obvious from reading https://github.com/ansible/ansible-modules-core/blob/devel/database/postgresql/postgresql_user.py that REVOKEs only happen on user deletion. This is confusing and the code or the docs should be fixed for this. It also means that editing a role/playbook (using postgresql_user) and removing a few privs that have previously been granted will not in fact revoke those privs, which also is confusing.\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/ansible/ansible/issues/comments/449719165","html_url":"https://github.com/ansible/ansible/issues/15794#issuecomment-449719165","issue_url":"https://api.github.com/repos/ansible/ansible/issues/15794","id":449719165,"node_id":"MDEyOklzc3VlQ29tbWVudDQ0OTcxOTE2NQ==","user":{"login":"Andersson007","id":34477873,"node_id":"MDQ6VXNlcjM0NDc3ODcz","avatar_url":"https://avatars3.githubusercontent.com/u/34477873?v=4","gravatar_id":"","url":"https://api.github.com/users/Andersson007","html_url":"https://github.com/Andersson007","followers_url":"https://api.github.com/users/Andersson007/followers","following_url":"https://api.github.com/users/Andersson007/following{/other_user}","gists_url":"https://api.github.com/users/Andersson007/gists{/gist_id}","starred_url":"https://api.github.com/users/Andersson007/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Andersson007/subscriptions","organizations_url":"https://api.github.com/users/Andersson007/orgs","repos_url":"https://api.github.com/users/Andersson007/repos","events_url":"https://api.github.com/users/Andersson007/events{/privacy}","received_events_url":"https://api.github.com/users/Andersson007/received_events","type":"User","site_admin":false},"created_at":"2018-12-24T10:58:02Z","updated_at":"2018-12-24T10:58:02Z","author_association":"CONTRIBUTOR","body":"Hello, I was informed today about this problem (thanks ansibot).\r\nI just fixed documentation in https://github.com/ansible/ansible/pull/49683 (the first aim of it is to add role_grant, role_revoke and comment params to this module).\r\nI agree that using of priv behaves strangely. If my patch will be approved and merged in 2.8, after that I'd like to rewrite the module in this part completely."}}
{"actor":{"display_login":"Andersson007"}}