ansible/test/integration/targets/postgresql/tasks/pg_authid_not_readable.yml

- name: "Admin user is allowed to access pg_authid relation: password comparison will succeed, password won't be updated"
  become_user: "{{ pg_user }}"
  become: yes
  postgresql_user:
    name: "{{ db_user1 }}"
    encrypted: 'yes'
    password: "md5{{ (db_password ~ db_user1) | hash('md5')}}"
    db: "{{ db_name }}"
    priv: 'test_table1:INSERT,SELECT,UPDATE,DELETE,TRUNCATE,REFERENCES,TRIGGER/test_table2:INSERT/CREATE,CONNECT,TEMP'
    login_user: "{{ pg_user }}"
  register: redo_as_admin

- name: "Check that task succeeded without any change"
  assert:
    that:
      - 'redo_as_admin is not failed'
      - 'redo_as_admin is not changed'
      - 'redo_as_admin is successful'

- name: "Check that normal user isn't allowed to access pg_authid"
  shell: 'psql -c "select * from pg_authid;" {{ db_name }} {{ db_user1 }}'
  environment:
    PGPASSWORD: '{{ db_password }}'
  ignore_errors: yes
  register: pg_authid

- assert:
    that:
      - 'pg_authid is failed'
      - pg_authid.stderr is search('permission denied for (relation|table) pg_authid')

- name: "Normal user isn't allowed to access pg_authid relation: password comparison will fail, password will be updated"
  become_user: "{{ pg_user }}"
  become: yes
  postgresql_user:
    name: "{{ db_user1 }}"
    encrypted: 'yes'
    password: "md5{{ (db_password ~ db_user1) | hash('md5')}}"
    db: "{{ db_name }}"
    priv: 'test_table1:INSERT,SELECT,UPDATE,DELETE,TRUNCATE,REFERENCES,TRIGGER/test_table2:INSERT/CREATE,CONNECT,TEMP'
    login_user: "{{ db_user1 }}"
    login_password: "{{ db_password }}"
  register: redo_as_normal_user

- name: "Check that task succeeded and that result is changed"
  assert:
    that:
      - 'redo_as_normal_user is not failed'
      - 'redo_as_normal_user is changed'
      - 'redo_as_normal_user is successful'