Ensure parameter values are quoted when needed when editing roles. Fixes #4393

This commit is contained in:
Akshay Joshi
2019-07-04 15:00:29 +01:00
committed by Dave Page
parent 0aa18fd466
commit 776884860e
4 changed files with 23 additions and 6 deletions

View File

@@ -1,4 +1,4 @@
SELECT att.attnum
FROM pg_attribute att
WHERE att.attrelid = {{tid}}::oid
AND att.attname = {{data.name|qtLiteral}}
AND att.attname = {{data.name|qtLiteral(True)}}

View File

@@ -4,7 +4,7 @@
{% macro APPLY(conn, database, role, param, value) -%}
ALTER {% if role %}ROLE {{ self.conn|qtIdent(role) }}{% if database %} IN DATABASE {{ conn|qtIdent(database) }}{% endif %}{% else %}DATABASE {{ conn|qtIdent(database) }}{% endif %}
SET {{ conn|qtIdent(param) }} TO {{ value }};
SET {{ conn|qtIdent(param) }} TO {{ value|qtLiteral }};
{%- endmacro %}
{% macro RESET(conn, database, role, param) -%}
ALTER {% if role %}ROLE {{ self.conn|qtIdent(role) }}{% if database %} IN DATABASE {{ conn|qtIdent(database) }}{% endif %}{% else %}DATABASE {{ conn|qtIdent(database) }}{% endif %}