From 55f725a502011155f0943f2340ef3763f014ccc0 Mon Sep 17 00:00:00 2001
From: Jan Tuomi <jan.tuomi@eficode.com>
Date: Sun, 26 Apr 2020 15:48:24 +0300
Subject: Initial commit

---
 postgrest/migrations/003-roles.sql | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 postgrest/migrations/003-roles.sql

(limited to 'postgrest/migrations/003-roles.sql')

diff --git a/postgrest/migrations/003-roles.sql b/postgrest/migrations/003-roles.sql
new file mode 100644
index 0000000..86e49f0
--- /dev/null
+++ b/postgrest/migrations/003-roles.sql
@@ -0,0 +1,15 @@
+-- authenticator role
+create role authenticator noinherit login password 'mysecretpassword';
+
+-- web_anon role
+create role web_anon nologin;
+grant usage on schema api to web_anon;
+grant web_anon to authenticator;
+-- grant select on api.todos to web_anon;
+
+-- todo_user role
+create role todo_user nologin;
+grant usage on schema api to todo_user;
+grant all on api.todos to todo_user;
+grant usage, select on sequence api.todos_id_seq to todo_user;
+grant todo_user to authenticator;
-- 
cgit v1.3