Thu, 06 Apr 2017 17:44:17 +0200
adds create database setup script
universe@2 | 1 | -- Create a database owner role, which has no login permissions. |
universe@2 | 2 | -- You can either: |
universe@2 | 3 | -- 1) login as default user and switch the user |
universe@2 | 4 | -- 2) decide to override this decision and give login permissions |
universe@2 | 5 | -- 3) use your superuser of choice to manage the database (not recommended!) |
universe@2 | 6 | create role lightpit_dbo with password 'lpit_dbo_changeme'; |
universe@2 | 7 | |
universe@2 | 8 | -- Create the actual (unprivileged) database user |
universe@2 | 9 | create user lightpit_user with password 'lpit_user_changeme'; |
universe@2 | 10 | |
universe@2 | 11 | -- Create the LightPIT schema |
universe@2 | 12 | create schema lightpit authorization lightpit_dbo; |
universe@2 | 13 | |
universe@2 | 14 | |
universe@2 | 15 | -- Grant basic privileges to user (the granting user must be the dbo) |
universe@2 | 16 | alter default privileges for role lightpit_dbo in schema lightpit |
universe@2 | 17 | grant select, insert, update, delete on tables to lightpit_user; |
universe@2 | 18 | alter default privileges for role lightpit_dbo in schema lightpit |
universe@2 | 19 | grant usage, select on sequences to lightpit_user; |
universe@2 | 20 | alter default privileges for role lightpit_dbo in schema lightpit |
universe@2 | 21 | grant execute on functions to lightpit_user; |
universe@2 | 22 | alter default privileges for role lightpit_dbo in schema lightpit |
universe@2 | 23 | grant usage on types to lightpit_user; |