kdevtmpfsi && permission denied to set role \"anon\"

[macro0000]

permission denied to set role "anon"

This problem occurred after I killed kdevtmpfsi and cleared all contents under 'tmp'

[steve-chavez]

Are you sure these events are related?

[wolfgangwalther]

which makes sense since 2 times out of 3 the same api request works.

Are you using a loader balancer like pgbouncer or something?

[fusionbeam]

no load balancer, single postgrest server wrapped by nginx

[fusionbeam]

for what is worth, I've managed to find the problem.
In one of the RPC functions I was doing a SET ROLE/SET SESSION AUTHORIZATION and then RESET ROLE before returning.

I think RESET ROLE was causing the problems in conjunction with thread pooling.

[wolfgangwalther]

When you're messing with SET SESSION AUTHORIZATION you are doing something wrong. The docs:

The session user identifier can be changed only if the initial session user (the authenticated user) had the superuser privilege. Otherwise, the command is accepted only if it specifies the authenticated user name.

That means you're running PostgREST with superuser privileges?

You should not do that.

As for SET ROLE you should always use that as SET LOCAL ROLE. This will set the role only for the current transaction - and you don't need to clean things up afterwards with RESET ROLE.

[macro0000]

kdevtmpfsi maliciously changed my permission. I was eager to recover and chose to reset. Thank you. Your suggestion is very useful