From 77c5da96d1dbf12500e92f8f26a65145c3a2c3f1 Mon Sep 17 00:00:00 2001 From: Trowbridge Date: Fri, 9 Nov 2018 12:37:19 -0500 Subject: [PATCH] move user file --- postgres/user.sql | 39 +++++++++++++++++++++++++++++++++++++++ user.sql | 37 ------------------------------------- 2 files changed, 39 insertions(+), 37 deletions(-) create mode 100644 postgres/user.sql delete mode 100644 user.sql diff --git a/postgres/user.sql b/postgres/user.sql new file mode 100644 index 0000000..4576f71 --- /dev/null +++ b/postgres/user.sql @@ -0,0 +1,39 @@ +DROP USER IF EXISTS report; + +SET password_encryption = 'scram-sha-256'; + +CREATE ROLE report WITH + LOGIN + NOSUPERUSER + NOCREATEDB + NOCREATEROLE + INHERIT + NOREPLICATION + CONNECTION LIMIT -1 + PASSWORD 'report'; + +--------------------grant-------------------------------------------------- + +GRANT USAGE ON SCHEMA lgdat TO report; + +GRANT SELECT /*, UPDATE, INSERT, DELETE*/ ON ALL TABLES IN SCHEMA lgdat TO report; + +GRANT USAGE ON ALL SEQUENCES IN SCHEMA lgdat TO report; + +ALTER DEFAULT PRIVILEGES IN SCHEMA lgdat GRANT SELECT/*, UPDATE, INSERT, DELETE*/ ON TABLES TO report; + +ALTER DEFAULT PRIVILEGES IN SCHEMA lgdat GRANT USAGE ON SEQUENCES TO report; + +---------------------------revoke--------------------------------------- + +REVOKE USAGE ON SCHEMA lgdat FROM report; + +REVOKE USAGE ON SCHEMA lgdat FROM report; + +REVOKE SELECT , UPDATE, INSERT, DELETE ON ALL TABLES IN SCHEMA lgdat FROM report; + +REVOKE USAGE ON ALL SEQUENCES IN SCHEMA lgdat FROM report; + +ALTER DEFAULT PRIVILEGES IN SCHEMA lgdat REVOKE SELECT, UPDATE, INSERT, DELETE ON TABLES FROM report; + +ALTER DEFAULT PRIVILEGES IN SCHEMA lgdat REVOKE USAGE ON SEQUENCES FROM report; \ No newline at end of file diff --git a/user.sql b/user.sql deleted file mode 100644 index e43a361..0000000 --- a/user.sql +++ /dev/null @@ -1,37 +0,0 @@ -DROP USER IF EXISTS salesreader; - -CREATE ROLE salesreader WITH - LOGIN - NOSUPERUSER - NOCREATEDB - NOCREATEROLE - INHERIT - NOREPLICATION - CONNECTION LIMIT -1 - ENCRYPTED PASSWORD 'md5b66677418e59ca921c20ff40534685a7'; - ---------------------grant-------------------------------------------------- - -GRANT USAGE ON SCHEMA rlarp TO salesreader; - -GRANT SELECT /*, UPDATE, INSERT, DELETE*/ ON ALL TABLES IN SCHEMA rlarp TO salesreader; - -GRANT USAGE ON ALL SEQUENCES IN SCHEMA rlarp TO salesreader; - -ALTER DEFAULT PRIVILEGES IN SCHEMA rlarp GRANT SELECT/*, UPDATE, INSERT, DELETE*/ ON TABLES TO salesreader; - -ALTER DEFAULT PRIVILEGES IN SCHEMA rlarp GRANT USAGE ON SEQUENCES TO salesreader; - ----------------------------revoke--------------------------------------- - -REVOKE USAGE ON SCHEMA tps FROM salesreader; - -REVOKE USAGE ON SCHEMA rlarp FROM salesreader; - -REVOKE SELECT /*, UPDATE, INSERT, DELETE*/ ON ALL TABLES IN SCHEMA rlarp FROM salesreader; - -REVOKE USAGE ON ALL SEQUENCES IN SCHEMA rlarp FROM salesreader; - -ALTER DEFAULT PRIVILEGES IN SCHEMA rlarp REVOKE SELECT/*, UPDATE, INSERT, DELETE*/ ON TABLES FROM salesreader; - -ALTER DEFAULT PRIVILEGES IN SCHEMA rlarp REVOKE USAGE ON SEQUENCES FROM salesreader; \ No newline at end of file