Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Cannot drop PostgreSQL role. Error: `cannot be dropped because some objects depend on it`

I was trying to delete PostgreSQL user:

DROP USER ryan; 

I received this error:

Error in query: ERROR: role "ryan" cannot be dropped because some objects depend on it DETAIL: privileges for database mydatabase 

I looked for a solution from these threads:

  • PostgreSQL - how to quickly drop a user with existing privileges
  • How to drop user in postgres if it has depending objects

Still have the same error.

This happens after I grant all permission to user "ryan" with:

GRANT ALL PRIVILEGES ON DATABASE mydatabase ON SCHEMA public TO ryan; 
like image 981
notalentgeek Avatar asked Jul 10 '18 02:07

notalentgeek


2 Answers

DROP USER (or DROP ROLE, same thing) cannot proceed while the role still owns anything or has any granted privileges on other objects.

Get rid of all privileges with DROP OWNED (which isn't too obvious from the wording). The manual:

[...] Any privileges granted to the given roles on objects in the current database and on shared objects (databases, tablespaces) will also be revoked.

So the reliable sequence of commands to drop a role is:

REASSIGN OWNED BY ryan TO postgres;  -- or some other trusted role DROP OWNED BY ryan; 

Run both commands in every database of the same cluster where the role owns anything or has any privileges!
And finally:

DROP USER ryan; 
  • REASSIGN OWNED changes ownership for all objects currently owned by the role.
  • DROP OWNED then only revokes privileges (ownerships out of the way).

Alternatively, you can skip REASSIGN OWNED. Then DROP OWNED will (also) drop all objects owned by the user. (Are you sure?!)

Related:

  • Drop a role with privileges (with a function to generate commands for all relevant DBs)
  • Find objects linked to a PostgreSQL role
like image 95
Erwin Brandstetter Avatar answered Sep 21 '22 19:09

Erwin Brandstetter


What worked for me was 1) Connecting to the database

\c mydatabase 

2) Reassigning Ownership

REASSIGN OWNED BY ryan TO <newuser>; 

Or/and just deleting the object

DROP OWNED BY ryan; 

3) Executing REVOKE PRIVILEGES

REVOKE ALL PRIVILEGES ON ALL TABLES IN SCHEMA public FROM ryan; REVOKE ALL PRIVILEGES ON ALL SEQUENCES IN SCHEMA public FROM ryan; REVOKE ALL PRIVILEGES ON ALL FUNCTIONS IN SCHEMA public FROM ryan; 

4) Dropping the user

DROP USER ryan; 

PS: You might not need to execute both Step 2 and 3, just one of the two steps might be usually enough.

like image 41
Samuel Anyaele Avatar answered Sep 20 '22 19:09

Samuel Anyaele