setup/01_create_database.sql

Thu, 06 Apr 2017 17:44:17 +0200

author
Mike Becker <universe@uap-core.de>
date
Thu, 06 Apr 2017 17:44:17 +0200
changeset 2
fcb452578142
permissions
-rw-r--r--

adds create database setup script

universe@2 1 -- Create a database owner role, which has no login permissions.
universe@2 2 -- You can either:
universe@2 3 -- 1) login as default user and switch the user
universe@2 4 -- 2) decide to override this decision and give login permissions
universe@2 5 -- 3) use your superuser of choice to manage the database (not recommended!)
universe@2 6 create role lightpit_dbo with password 'lpit_dbo_changeme';
universe@2 7
universe@2 8 -- Create the actual (unprivileged) database user
universe@2 9 create user lightpit_user with password 'lpit_user_changeme';
universe@2 10
universe@2 11 -- Create the LightPIT schema
universe@2 12 create schema lightpit authorization lightpit_dbo;
universe@2 13
universe@2 14
universe@2 15 -- Grant basic privileges to user (the granting user must be the dbo)
universe@2 16 alter default privileges for role lightpit_dbo in schema lightpit
universe@2 17 grant select, insert, update, delete on tables to lightpit_user;
universe@2 18 alter default privileges for role lightpit_dbo in schema lightpit
universe@2 19 grant usage, select on sequences to lightpit_user;
universe@2 20 alter default privileges for role lightpit_dbo in schema lightpit
universe@2 21 grant execute on functions to lightpit_user;
universe@2 22 alter default privileges for role lightpit_dbo in schema lightpit
universe@2 23 grant usage on types to lightpit_user;

mercurial