setup/postgres/psql_create_database.sql

Sun, 28 Jul 2024 12:19:42 +0200

author
Mike Becker <universe@uap-core.de>
date
Sun, 28 Jul 2024 12:19:42 +0200
changeset 303
4c5342255263
parent 16
4e0998805276
permissions
-rw-r--r--

add changelog entry for issue #401

-- Create a database owner role, which is also a privileged user
create user lightpit_dbo with password 'lpit_dbo_changeme';

-- Create the actual (unprivileged) database user
create user lightpit_user with password 'lpit_user_changeme';

-- Create the LightPIT schema
create schema lightpit authorization lightpit_dbo;
grant usage on schema lightpit to lightpit_user;

-- Grant basic privileges to user (the granting user must be the dbo)
alter default privileges for role lightpit_dbo in schema lightpit
    grant select, insert, update, delete on tables to lightpit_user;
alter default privileges for role lightpit_dbo in schema lightpit
    grant usage, select on sequences to lightpit_user;
alter default privileges for role lightpit_dbo in schema lightpit
    grant execute on functions to lightpit_user;
alter default privileges for role lightpit_dbo in schema lightpit
    grant usage on types to lightpit_user;

-- restrict the search path to the lightpit schema
alter role lightpit_dbo set search_path to lightpit;
alter role lightpit_user set search_path to lightpit;

mercurial