Run tests with different users.

In the real world, people don't use superusers and DBAs will likely not
want just anyone adding system versioning and whatnot.  So run the tests
as realistic users in order to better simulate the real world.

expected/drop_protection.out

@@ -5,6 +5,8 @@ FROM pg_settings WHERE name = 'server_version_num';
  f
 (1 row)
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
 /* Make sure nobody drops the objects we keep track of in our catalogs. */
 CREATE TYPE integerrange AS RANGE (SUBTYPE = integer);
 CREATE TABLE dp (

expected/drop_protection_1.out

@@ -5,6 +5,8 @@ FROM pg_settings WHERE name = 'server_version_num';
  t
 (1 row)
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
 /* Make sure nobody drops the objects we keep track of in our catalogs. */
 CREATE TYPE integerrange AS RANGE (SUBTYPE = integer);
 CREATE TABLE dp (

expected/excluded_columns.out

@@ -5,6 +5,8 @@ FROM pg_settings WHERE name = 'server_version_num';
  f
 (1 row)
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
 CREATE TABLE excl (
     value text NOT NULL,
     null_value integer,

expected/excluded_columns_1.out

@@ -5,6 +5,8 @@ FROM pg_settings WHERE name = 'server_version_num';
  t
 (1 row)
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
 CREATE TABLE excl (
     value text NOT NULL,
     null_value integer,

expected/for_portion_of.out

@@ -6,6 +6,8 @@ FROM pg_settings WHERE name = 'server_version_num';
  f      | f
 (1 row)
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
 /*
  * Create a sequence to test non-serial primary keys.  This actually tests
  * things like uuid primary keys, but makes for reproducible test cases.

expected/for_portion_of_1.out

@@ -6,6 +6,8 @@ FROM pg_settings WHERE name = 'server_version_num';
  f      | t
 (1 row)
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
 /*
  * Create a sequence to test non-serial primary keys.  This actually tests
  * things like uuid primary keys, but makes for reproducible test cases.

expected/for_portion_of_2.out

@@ -6,6 +6,8 @@ FROM pg_settings WHERE name = 'server_version_num';
  t      | t
 (1 row)
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
 /*
  * Create a sequence to test non-serial primary keys.  This actually tests
  * things like uuid primary keys, but makes for reproducible test cases.

expected/health_checks.out

@@ -5,6 +5,8 @@ FROM pg_settings WHERE name = 'server_version_num';
  f
 (1 row)
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
 /* Ensure tables with periods are persistent */
 CREATE UNLOGGED TABLE log (id bigint, s date, e date);
 SELECT periods.add_period('log', 'p', 's', 'e'); -- fails

expected/health_checks_1.out

@@ -5,6 +5,8 @@ FROM pg_settings WHERE name = 'server_version_num';
  t
 (1 row)
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
 /* Ensure tables with periods are persistent */
 CREATE UNLOGGED TABLE log (id bigint, s date, e date);
 SELECT periods.add_period('log', 'p', 's', 'e'); -- fails

expected/install.out

@@ -11,3 +11,6 @@ WHERE extname = 'periods';
  1.2
 (1 row)
 
+DROP ROLE periods_unprivileged_user;
+ERROR:  role "periods_unprivileged_user" does not exist
+CREATE ROLE periods_unprivileged_user;

expected/issues.out

@@ -5,6 +5,8 @@ FROM pg_settings WHERE name = 'server_version_num';
  f
 (1 row)
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
 /* https://github.com/xocolatl/periods/issues/5 */
 CREATE TABLE issue5 (
     id integer GENERATED ALWAYS AS IDENTITY PRIMARY KEY,

expected/issues_1.out

@@ -5,6 +5,8 @@ FROM pg_settings WHERE name = 'server_version_num';
  t
 (1 row)
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
 /* https://github.com/xocolatl/periods/issues/5 */
 CREATE TABLE issue5 (
     id integer GENERATED ALWAYS AS IDENTITY PRIMARY KEY,

expected/periods.out

@@ -5,6 +5,8 @@ FROM pg_settings WHERE name = 'server_version_num';
  f
 (1 row)
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
 /* Basic period definitions with dates */
 CREATE TABLE basic (val text, s date, e date);
 TABLE periods.periods;

expected/periods_1.out

@@ -5,6 +5,8 @@ FROM pg_settings WHERE name = 'server_version_num';
  t
 (1 row)
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
 /* Basic period definitions with dates */
 CREATE TABLE basic (val text, s date, e date);
 TABLE periods.periods;

expected/predicates.out

@@ -1,3 +1,5 @@
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
 CREATE TABLE preds (s integer, e integer);
 SELECT periods.add_period('preds', 'p', 's', 'e');
  add_period 

expected/rename_following.out

@@ -5,6 +5,8 @@ FROM pg_settings WHERE name = 'server_version_num';
  f
 (1 row)
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
 /*
  * If anything we store as "name" is renamed, we need to update our catalogs or
  * throw an error.

expected/rename_following_1.out

@@ -5,6 +5,8 @@ FROM pg_settings WHERE name = 'server_version_num';
  t
 (1 row)
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
 /*
  * If anything we store as "name" is renamed, we need to update our catalogs or
  * throw an error.

expected/system_time_periods.out

@@ -5,6 +5,8 @@ FROM pg_settings WHERE name = 'server_version_num';
  f
 (1 row)
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
 /* SYSTEM_TIME with date */
 BEGIN;
 SELECT transaction_timestamp()::date AS xd,

expected/system_time_periods_1.out

@@ -5,6 +5,8 @@ FROM pg_settings WHERE name = 'server_version_num';
  t
 (1 row)
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
 /* SYSTEM_TIME with date */
 BEGIN;
 SELECT transaction_timestamp()::date AS xd,

expected/system_versioning.out

@@ -12,6 +12,8 @@ FROM pg_settings WHERE name = 'server_version_num';
  f
 (1 row)
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
 /* Basic SYSTEM VERSIONING */
 CREATE TABLE sysver (val text, flap boolean);
 SELECT periods.add_system_time_period('sysver', excluded_column_names => ARRAY['flap']);

expected/system_versioning_1.out

@@ -12,6 +12,8 @@ FROM pg_settings WHERE name = 'server_version_num';
  t
 (1 row)
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
 /* Basic SYSTEM VERSIONING */
 CREATE TABLE sysver (val text, flap boolean);
 SELECT periods.add_system_time_period('sysver', excluded_column_names => ARRAY['flap']);

expected/uninstall.out

@@ -1 +1,2 @@
 DROP EXTENSION periods;
+DROP ROLE periods_unprivileged_user;

expected/unique_foreign.out

@@ -5,6 +5,8 @@ FROM pg_settings WHERE name = 'server_version_num';
  f
 (1 row)
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
 -- Unique keys are already pretty much guaranteed by the underlying features of
 -- PostgreSQL, but test them anyway.
 CREATE TABLE uk (id integer, s integer, e integer, CONSTRAINT uk_pkey PRIMARY KEY (id, s, e));

expected/unique_foreign_1.out

@@ -5,6 +5,8 @@ FROM pg_settings WHERE name = 'server_version_num';
  t
 (1 row)
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
 -- Unique keys are already pretty much guaranteed by the underlying features of
 -- PostgreSQL, but test them anyway.
 CREATE TABLE uk (id integer, s integer, e integer, CONSTRAINT uk_pkey PRIMARY KEY (id, s, e));

periods--1.2.sql

@@ -32,6 +32,7 @@ CREATE TABLE periods.periods (
 
     CHECK (start_column_name <> end_column_name)
 );
+GRANT SELECT ON TABLE periods.periods TO PUBLIC;
 SELECT pg_catalog.pg_extension_config_dump('periods.periods', '');
 
 CREATE TABLE periods.system_time_periods (
@@ -48,6 +49,7 @@ CREATE TABLE periods.system_time_periods (
 
     CHECK (period_name = 'system_time')
 );
+GRANT SELECT ON TABLE periods.system_time_periods TO PUBLIC;
 SELECT pg_catalog.pg_extension_config_dump('periods.system_time_periods', '');
 
 COMMENT ON TABLE periods.periods IS 'The main catalog for periods.  All "DDL" operations for periods must first take an exclusive lock on this table.';
@@ -75,6 +77,7 @@ CREATE TABLE periods.for_portion_views (
 
     UNIQUE (view_name)
 );
+GRANT SELECT ON TABLE periods.for_portion_views TO PUBLIC;
 SELECT pg_catalog.pg_extension_config_dump('periods.for_portion_views', '');
 
 CREATE TABLE periods.unique_keys (
@@ -89,6 +92,7 @@ CREATE TABLE periods.unique_keys (
 
     FOREIGN KEY (table_name, period_name) REFERENCES periods.periods
 );
+GRANT SELECT ON TABLE periods.unique_keys TO PUBLIC;
 SELECT pg_catalog.pg_extension_config_dump('periods.unique_keys', '');
 
 COMMENT ON TABLE periods.unique_keys IS 'A registry of UNIQUE/PRIMARY keys using periods WITHOUT OVERLAPS';
@@ -115,6 +119,7 @@ CREATE TABLE periods.foreign_keys (
     CHECK (delete_action NOT IN ('CASCADE', 'SET NULL', 'SET DEFAULT')),
     CHECK (update_action NOT IN ('CASCADE', 'SET NULL', 'SET DEFAULT'))
 );
+GRANT SELECT ON TABLE periods.foreign_keys TO PUBLIC;
 SELECT pg_catalog.pg_extension_config_dump('periods.foreign_keys', '');
 
 COMMENT ON TABLE periods.foreign_keys IS 'A registry of foreign keys using periods WITHOUT OVERLAPS';
@@ -144,6 +149,7 @@ CREATE TABLE periods.system_versioning (
     UNIQUE (func_between_symmetric),
     UNIQUE (func_from_to)
 );
+GRANT SELECT ON TABLE periods.system_versioning TO PUBLIC;
 SELECT pg_catalog.pg_extension_config_dump('periods.system_versioning', '');
 
 COMMENT ON TABLE periods.system_versioning IS 'A registry of tables with SYSTEM VERSIONING';

sql/drop_protection.sql

@@ -1,6 +1,9 @@
 SELECT setting::integer < 90600 AS pre_96
 FROM pg_settings WHERE name = 'server_version_num';
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
+
 /* Make sure nobody drops the objects we keep track of in our catalogs. */
 
 CREATE TYPE integerrange AS RANGE (SUBTYPE = integer);

sql/excluded_columns.sql

@@ -1,6 +1,9 @@
 SELECT setting::integer < 90600 AS pre_96
 FROM pg_settings WHERE name = 'server_version_num';
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
+
 CREATE TABLE excl (
     value text NOT NULL,
     null_value integer,

sql/for_portion_of.sql

@@ -2,6 +2,9 @@ SELECT setting::integer < 100000 AS pre_10,
        setting::integer < 120000 AS pre_12
 FROM pg_settings WHERE name = 'server_version_num';
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
+
 /*
  * Create a sequence to test non-serial primary keys.  This actually tests
  * things like uuid primary keys, but makes for reproducible test cases.

sql/health_checks.sql

@@ -1,6 +1,9 @@
 SELECT setting::integer < 90600 AS pre_96
 FROM pg_settings WHERE name = 'server_version_num';
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
+
 /* Ensure tables with periods are persistent */
 CREATE UNLOGGED TABLE log (id bigint, s date, e date);
 SELECT periods.add_period('log', 'p', 's', 'e'); -- fails

sql/install.sql

@@ -7,3 +7,6 @@ ALTER EXTENSION periods UPDATE TO '1.2';
 SELECT extversion
 FROM pg_extension
 WHERE extname = 'periods';
+
+DROP ROLE periods_unprivileged_user;
+CREATE ROLE periods_unprivileged_user;

sql/issues.sql

@@ -1,6 +1,9 @@
 SELECT setting::integer < 100000 AS pre_10
 FROM pg_settings WHERE name = 'server_version_num';
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
+
 /* https://github.com/xocolatl/periods/issues/5 */
 
 CREATE TABLE issue5 (

sql/periods.sql

@@ -1,6 +1,9 @@
 SELECT setting::integer < 130000 AS pre_13
 FROM pg_settings WHERE name = 'server_version_num';
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
+
 /* Basic period definitions with dates */
 CREATE TABLE basic (val text, s date, e date);
 TABLE periods.periods;

sql/predicates.sql

@@ -1,3 +1,6 @@
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
+
 CREATE TABLE preds (s integer, e integer);
 SELECT periods.add_period('preds', 'p', 's', 'e');
 

sql/rename_following.sql

@@ -1,6 +1,9 @@
 SELECT setting::integer < 90600 AS pre_96
 FROM pg_settings WHERE name = 'server_version_num';
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
+
 /*
  * If anything we store as "name" is renamed, we need to update our catalogs or
  * throw an error.

sql/system_time_periods.sql

@@ -1,6 +1,9 @@
 SELECT setting::integer < 90600 AS pre_96
 FROM pg_settings WHERE name = 'server_version_num';
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
+
 /* SYSTEM_TIME with date */
 
 BEGIN;

sql/system_versioning.sql

@@ -9,6 +9,9 @@
 SELECT setting::integer < 120000 AS pre_12
 FROM pg_settings WHERE name = 'server_version_num';
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
+
 /* Basic SYSTEM VERSIONING */
 
 CREATE TABLE sysver (val text, flap boolean);

sql/uninstall.sql

@@ -1 +1,2 @@
 DROP EXTENSION periods;
+DROP ROLE periods_unprivileged_user;

sql/unique_foreign.sql

@@ -1,6 +1,9 @@
 SELECT setting::integer < 90600 AS pre_96
 FROM pg_settings WHERE name = 'server_version_num';
 
+/* Run tests as unprivileged user */
+SET ROLE TO periods_unprivileged_user;
+
 -- Unique keys are already pretty much guaranteed by the underlying features of
 -- PostgreSQL, but test them anyway.
 CREATE TABLE uk (id integer, s integer, e integer, CONSTRAINT uk_pkey PRIMARY KEY (id, s, e));