Revoke default privileges for new users

[ghost]

New users actually can connect and create tables by default. I would like to know how can I do revoke with pulumi/postgresql. Thanks

[stack72]

Is this what you are looking for? https://www.pulumi.com/docs/reference/pkg/postgresql/defaultprivileges/

[ghost]

hi @stack72 , DefaultPrivileges is working with object types: table, function, sequence, type) but not database. I tried to use Grant instead of DefaultPrivileges and it also doesn't seems to work correctly. Let me create simple repository to reproduce result easily.
I'm working with AWS RDS for Postgres if it is matter 😄

[SharpEdgeMarshall]

Same issue here, how can we revoke default PUBLIC role connect, temporary on Database?

[yann-soubeyrand]

Here is the link to the upstream issue regarding GRANT not working: cyrilgdn/terraform-provider-postgresql#133

[yann-soubeyrand]

Hello, I posted the solution I found on the upstream issue. In short, I had to set up a new PostgreSQL provider using the database owner’s credentials, which I used with postgresql.NewGrant().