mirror of
https://github.com/rommapp/romm.git
synced 2026-06-27 22:35:57 +00:00
26cf4b36f8
Addresses review feedback: granting ALL PRIVILEGES on *.* is overly broad, especially against a shared DB instance. A database-level grant on the `romm\_test%` wildcard pattern still lets the user CREATE the per-worker databases (romm_test_gw0, ...) needed by pytest-xdist, while confining it to that namespace — verified that out-of-namespace CREATE DATABASE is denied. PostgreSQL needs no equivalent change: its CI service user (POSTGRES_USER) is the container superuser. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>