[ckan-dev] data store permission problem

Sat May 25 16:54:07 UTC 2013

After getting basic CKAN 2.0 working on CentOS 6, I set up the data store
according to the directions at
http://docs.ckan.org/en/ckan-2.0/datastore-setup.html

When I try to test my installation with this URL:

http://localhost/api/3/action/datastore_search?resource_id=_table_metadata

I get a 500 server error. In the error log:

[Sat May 25 11:47:44 2013] [error] [client 10.12.15.181] Error - <class
'sqlalchemy.exc.ProgrammingError'>: (ProgrammingError) permission denied
for schema public
[Sat May 25 11:47:44 2013] [error] [client 10.12.15.181]  'CREATE TYPE
"nested" AS (json json, extra text)' {}

The paster set-permissions command ran without error. I had to move CKAN
from PostgreSQL 8.4 to 9.2, and dumped and loaded the ckan database to do
that, but the data store database was created and set up directly on the
9.2 database. I don't know much about the postgreSQL permissions or access
control model, but here's what my databases look like in postgres:

                                  List of databases
   Name    |  Owner   | Encoding |   Collate   |    Ctype    |   Access
privileges
-----------+----------+----------+-------------+-------------+-----------------------
 ckandb    | ckanuser | UTF8     | en_US.UTF-8 | en_US.UTF-8 | =Tc/ckanuser
        +
           |          |          |             |             |
ckanuser=CTc/ckanuser
 ckandstor | ckanuser | UTF8     | en_US.UTF-8 | en_US.UTF-8 | =Tc/ckanuser
        +
           |          |          |             |             |
ckanuser=CTc/ckanuser+
           |          |          |             |             |
ckandsro=c/ckanuser

Any ideas where I went wrong?

-Don
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.okfn.org/pipermail/ckan-dev/attachments/20130525/23d88068/attachment.html>