Ensure consistent directory permissions

src/cluster.py

@@ -189,7 +189,7 @@ def configure_patroni_on_unit(self):
 
         # Expected permission
         # Replicas refuse to start with the default permissions
-        os.chmod(POSTGRESQL_DATA_PATH, 0o750)  # noqa: S103
+        os.chmod(POSTGRESQL_DATA_PATH, 0o700)
 
     def _change_owner(self, path: str) -> None:
         """Change the ownership of a file or a directory to the postgres user.

src/relations/async_replication.py

@@ -660,7 +660,7 @@ def _reinitialise_pgdata(self) -> None:
             ) from e
         os.mkdir(POSTGRESQL_DATA_PATH)
         # Expected permissions
-        os.chmod(POSTGRESQL_DATA_PATH, 0o750)  # noqa: S103
+        os.chmod(POSTGRESQL_DATA_PATH, 0o700)
         self.charm._patroni._change_owner(POSTGRESQL_DATA_PATH)
 
     @property

tests/unit/test_cluster.py

@@ -562,7 +562,7 @@ def test_configure_patroni_on_unit(peers_ips, patroni):
 
         _open.assert_called_once_with(CREATE_CLUSTER_CONF_PATH, "a")
         _chmod.assert_called_once_with(
-            "/var/snap/charmed-postgresql/common/var/lib/postgresql", 488
+            "/var/snap/charmed-postgresql/common/var/lib/postgresql", 448
         )