citusdata / pg_cron

Run periodic jobs in PostgreSQL
PostgreSQL License
2.9k stars 195 forks source link

Azure Postgres Job Table Permissions #316

Open tcartwright opened 8 months ago

tcartwright commented 8 months ago

We have multiple admins maintaining an Azure Postgres instance. Azure does not let us have SU unfortunately. Which means that as the pg_cron table are created with the "azuresu" account, and public only has read only access, we cannot change permissions on the table nor can we see each others jobs or job details.

We would like our admins to be able to see all jobs in the jobs table, or at least the ability to grant this. However we cannot change permissions or the owner of the table. Keeping us from changing any permissions.

This is a huge issue as we cannot see other users jobs or delete them even if we know the id. Nor can we update someone elses existing job.

Now if a user leaves the company we have to change their password and log is as them to see if they have any jobs. Also, there is no way for us to write an automated report for any failed jobs.

EDIT: Clarification

tcartwright commented 8 months ago

Even worse, other users cannot even see other users job run details. So each admin has to check on the results of their own jobs...

AGAIN, This is for Azure only where we cannot get SU.