fix: pg_cron perms

Author: soedirgo

ansible/files/postgresql_extension_custom_scripts/pg_cron/after-create.sql

@@ -0,0 +1,13 @@
+grant usage on schema cron to postgres with grant option;
+grant all on all functions in schema cron to postgres with grant option;
+
+alter default privileges for user supabase_admin in schema cron grant all
+    on sequences to postgres with grant option;
+alter default privileges for user supabase_admin in schema cron grant all
+    on tables to postgres with grant option;
+alter default privileges for user supabase_admin in schema cron grant all
+    on functions to postgres with grant option;
+
+grant all privileges on all tables in schema cron to postgres with grant option;
+revoke all on table cron.job from postgres;
+grant select on table cron.job to postgres with grant option;

common.vars.pkr.hcl

@@ -1 +1 @@
-postgres-version = "15.1.0.129"
+postgres-version = "15.1.0.130-cron"

migrations/db/migrations/20231020085357_revoke_writes_on_cron_job_from_postgres.sql

@@ -0,0 +1,13 @@
+-- migrate:up
+do $$
+begin
+  if exists (select from pg_extension where extname = 'pg_cron') then
+    revoke all on table cron.job from postgres;
+    grant select on table cron.job to postgres with grant option;
+  end if;
+end $$;
+
+drop event trigger if exists issue_pg_cron_access;
+drop function if exists extensions.grant_pg_cron_access();
+
+-- migrate:down