Use unprivileged PostgreSQL role for testing

In your test environment config, put something like config.test_role = :your_frontend_db_role crashtech/torque-postgresql#33
mlt · Jul 14, 2019 · caa081e · caa081e
1 parent ae145f8
commit caa081e
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/activerecord/lib/active_record/connection_adapters/postgresql/referential_integrity.rb b/activerecord/lib/active_record/connection_adapters/postgresql/referential_integrity.rb
@@ -8,6 +8,7 @@ def disable_referential_integrity # :nodoc:
           original_exception = nil
 
           begin
+            execute('reset role')
             transaction(requires_new: true) do
               execute(tables_with_schema_all.collect { |name| "ALTER TABLE #{name} DISABLE TRIGGER ALL" }.join(";"))
             end
@@ -34,6 +35,10 @@ def disable_referential_integrity # :nodoc:
             transaction(requires_new: true) do
               execute(tables_with_schema_all.collect { |name| "ALTER TABLE #{name} ENABLE TRIGGER ALL" }.join(";"))
             end
+            r = Rails.configuration.test_role
+            if r.present?
+              execute("set role #{r}")
+            end
           rescue ActiveRecord::ActiveRecordError
           end
         end

diff --git a/activerecord/lib/active_record/connection_adapters/postgresql/schema_statements.rb b/activerecord/lib/active_record/connection_adapters/postgresql/schema_statements.rb
@@ -299,7 +299,12 @@ def reset_pk_sequence!(table, pk = nil, sequence = nil) #:nodoc:
               end
             end
 
+            execute('reset role')
             query_value("SELECT setval(#{quote(quoted_sequence)}, #{max_pk ? max_pk : minvalue}, #{max_pk ? true : false})", "SCHEMA")
+            r = Rails.configuration.test_role
+            if r.present?
+              execute("set role #{r}")
+            end
           end
         end