<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Title" content="">
<meta name="Keywords" content="">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0cm;
margin-right:0cm;
margin-bottom:0cm;
margin-left:36.0pt;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.msoIns
{mso-style-type:export-only;
mso-style-name:"";
text-decoration:underline;
color:teal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:595.0pt 842.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:18512622;
mso-list-type:hybrid;
mso-list-template-ids:-370999362 134807567 134807577 134807579 134807567 134807577 134807579 134807567 134807577 134807579;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l1
{mso-list-id:108399853;
mso-list-template-ids:666381166;}
@list l1:level1
{mso-level-start-at:2;
mso-level-tab-stop:36.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l2
{mso-list-id:981351259;
mso-list-template-ids:-1516369452;}
@list l3
{mso-list-id:1187451727;
mso-list-template-ids:-980903958;}
@list l4
{mso-list-id:1703283876;
mso-list-type:hybrid;
mso-list-template-ids:618042818 134807567 134807577 134807579 134807567 134807577 134807579 134807567 134807577 134807579;}
@list l4:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l4:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l4:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l4:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l4:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l4:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l4:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l4:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l4:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style>
</head>
<body bgcolor="white" lang="EN-GB" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">fyi<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span lang="NL-BE" style="font-size:11.0pt">Christophe De Blende</span></b><span lang="NL-BE" style="font-size:11.0pt"> <br>
Ontwikkelaar<br>
<br>
Vlaamse overheid <br>
DEPARTEMENT <b>OMGEVING</b> <br>
Afdeling Data- en Informatiebeheer en Digitale Maatschappij <br>
<b>T</b> 02 553 73 02 <br>
Koning Albert II-laan 20 bus 8, 1000 Brussel <br>
</span><span style="font-size:11.0pt"><a href="about://www.omgevingvlaanderen.be"><span lang="NL-BE">www.omgevingvlaanderen.be</span></a></span><span lang="NL-BE" style="font-size:11.0pt"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="NL-BE" style="font-size:11.0pt"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="color:black">From: </span></b><span style="color:black">"De Blende, Christophe" <christophe.deblende@vlaanderen.be><br>
<b>Date: </b>Tuesday, 16 January 2018 at 10:55<br>
<b>To: </b>"Apocalypse.cow" <apocalypse.cow-bounces@list.omgevingvlaanderen.be>, "Uytterhoeven, Patrik" <patrik.uytterhoeven@vlaanderen.be>, "Sere, Gerrit" <gerrit.sere@vlaanderen.be><br>
<b>Subject: </b>Rechten IMJV goedzetten</span><span style="color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span lang="NL-BE" style="font-size:11.0pt">Dag Patrik, Gerrit,
</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="NL-BE" style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span lang="NL-BE" style="font-size:11.0pt">We proberen voor de IMJV campagne bepaalde ‘vaste gegevens’ op te laden. We lopen tegen de volgende fout mbt rechten op de LOB’s.</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="NL-BE" style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span lang="NL-BE" style="font-size:11.0pt">Dus op de databank imjvcampagne-oe-1.vm.cumuli.be zie ik het volgende:</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="NL-BE" style="font-size:11.0pt"> </span><o:p></o:p></p>
<ol style="margin-top:0cm" start="1" type="1">
<li class="MsoNormal" style="margin-left:0cm;mso-list:l4 level1 lfo3"><span lang="NL-BE" style="font-size:11.0pt">User rechten zien er goed uit</span><o:p></o:p></li></ol>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:11.0pt">[local] postgres@imjv_oefen=# \du</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:11.0pt"> List of roles</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:11.0pt"> Role name | Attributes | Member of</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:11.0pt">------------------+------------------------------------------------------------+------------</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:11.0pt">imjv | | {imjv_dml}</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:11.0pt">imjv_dba | | {imjv_ddl}</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:11.0pt">imjv_ddl | Cannot login | {}</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:11.0pt">imjv_dml | Cannot login | {}</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:11.0pt">imjv_ro | Cannot login | {}</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:11.0pt">postgres | Superuser, Create role, Create DB, Replication, Bypass RLS | {}</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span lang="NL-BE" style="font-size:11.0pt">streaming_barman | Superuser, Replication | {}</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span lang="NL-BE" style="font-size:11.0pt"> </span><o:p></o:p></p>
<ol style="margin-top:0cm" start="2" type="1">
<li class="MsoNormal" style="margin-left:0cm;mso-list:l4 level1 lfo3"><span lang="NL-BE" style="font-size:11.0pt">De rechten op de LOBs lijken verkeerd. Deze staan allemaal op imjv_ddl, ik zou imjv_dml verwachten of imjv. Het is zo dat de imjv user hieraan
moet kunnen. </span><o:p></o:p></li></ol>
<p class="MsoListParagraph"><span lang="NL-BE" style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoListParagraph"><span style="font-size:11.0pt">[local] postgres@imjv_oefen=# \lo_list</span><o:p></o:p></p>
<p class="MsoListParagraph"><span style="font-size:11.0pt"> Large objects</span><o:p></o:p></p>
<p class="MsoListParagraph"><span style="font-size:11.0pt"> ID | Owner | Description</span><o:p></o:p></p>
<p class="MsoListParagraph"><span style="font-size:11.0pt">----------+----------+-------------</span><o:p></o:p></p>
<p class="MsoListParagraph"><span style="font-size:11.0pt"> 26685 | imjv_ddl |</span><o:p></o:p></p>
<p class="MsoListParagraph"><span style="font-size:11.0pt"> 26686 | imjv_ddl |</span><o:p></o:p></p>
<p class="MsoListParagraph"><span style="font-size:11.0pt">41915337 | imjv_ddl |</span><o:p></o:p></p>
<p class="MsoListParagraph"><span style="font-size:11.0pt">41915338 | imjv_ddl |</span><o:p></o:p></p>
<p class="MsoListParagraph"><span style="font-size:11.0pt">41915341 | imjv_ddl |</span><o:p></o:p></p>
<p class="MsoListParagraph"><span style="font-size:11.0pt">41915572 | imjv_ddl |</span><o:p></o:p></p>
<p class="MsoListParagraph"><span style="font-size:11.0pt">41915739 | imjv_ddl |</span><o:p></o:p></p>
<p class="MsoListParagraph"><span style="font-size:11.0pt">41915910 | imjv_ddl |</span><o:p></o:p></p>
<p class="MsoListParagraph"><span style="font-size:11.0pt">41915986 | imjv_ddl |</span><o:p></o:p></p>
<p class="MsoListParagraph"><span style="font-size:11.0pt">41916012 | imjv_ddl |</span><o:p></o:p></p>
<p class="MsoListParagraph"><span style="font-size:11.0pt">41916059 | imjv_ddl |</span><o:p></o:p></p>
<p class="MsoListParagraph"><span style="font-size:11.0pt">41916074 | imjv_ddl |</span><o:p></o:p></p>
<p class="MsoListParagraph"><span lang="NL-BE" style="font-size:11.0pt">41916141 | imjv_ddl |</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span lang="NL-BE" style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span lang="NL-BE" style="font-size:11.0pt">In de code zien we het volgende als fout. Dus lezen kan je blijkbaar wel zonder owner te zijn, maar om te deleten moet je wel owner zijn.
</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="NL-BE" style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:11.0pt">Caused by: org.postgresql.util.PSQLException: ERROR: must be owner of large object 41991057</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:11.0pt"> at org.postgresql.core.v3.QueryExecutorImpl.receiveErrorResponse(QueryExecutorImpl.java:2476)</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:11.0pt"> at org.postgresql.core.v3.QueryExecutorImpl.processResults(QueryExecutorImpl.java:2189)</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:11.0pt">
</span><span lang="NL-BE" style="font-size:11.0pt">... 34 more</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="NL-BE" style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span lang="NL-BE" style="font-size:11.0pt;background:lime;mso-highlight:lime">@Patrik of Gerrit:</span><span lang="NL-BE" style="font-size:11.0pt"> Is het mogelijk om effe na te gaan wat de rechten zijn op de LOB’s op de verschillende
databanken en deze goed te zetten? Of aan te geven hoe ik die correct kan zetten. Ik denk dat we volgende databanken hebben:</span><o:p></o:p></p>
<ol style="margin-top:0cm" start="1" type="1">
<li class="MsoNormal" style="margin-left:0cm;mso-list:l0 level1 lfo7"><span lang="NL-BE" style="font-size:11.0pt">Imjv-postgres-<span style="background:yellow;mso-highlight:yellow">xx</span>.vm.cumuli.be (1 per omgeving)</span><o:p></o:p></li><li class="MsoNormal" style="margin-left:0cm;mso-list:l0 level1 lfo7"><span lang="NL-BE" style="font-size:11.0pt">Imjvcampagne-postgres-oe.vm.cumuli.be</span><o:p></o:p></li></ol>
<p class="MsoNormal"><span lang="NL-BE" style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><u><span lang="NL-BE" style="font-size:11.0pt">Wat betreft de ownership, mits we overal als imjv user inloggen applicatief, lijkt mij het slim om overal de imjv user owner te maken van de LOB’s.</span></u><o:p></o:p></p>
<p class="MsoNormal"><span lang="NL-BE" style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span lang="NL-BE" style="font-size:11.0pt">Mvg</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="NL-BE" style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><b><span lang="NL-BE" style="font-size:11.0pt">Christophe De Blende</span></b><span lang="NL-BE" style="font-size:11.0pt"> <br>
Ontwikkelaar<br>
<br>
Vlaamse overheid <br>
DEPARTEMENT <b>OMGEVING</b> <br>
Afdeling Data- en Informatiebeheer en Digitale Maatschappij <br>
<b>T</b> 02 553 73 02 <br>
Koning Albert II-laan 20 bus 8, 1000 Brussel <br>
</span><span style="font-size:11.0pt"><a href="about://www.omgevingvlaanderen.be"><span lang="NL-BE">www.omgevingvlaanderen.be</span></a></span><o:p></o:p></p>
</div>
</body>
</html>