zydronium/google-nomulus
1
0
Fork 0
mirror of https://github.com/google/nomulus.git synced 2025-07-14 15:05:11 +02:00
Code Issues Projects Releases Packages Wiki Activity

Restrict nomulus user access to flyway table (#297)

Browse source 
* Restrict nomulus user access to flyway table

The regular read-write user should not have write permissions to
the flyway metadata table.
This commit is contained in:
Weimin Yu 2019-10-02 11:05:46 -04:00 • committed by GitHub
parent 42edf16f3f
commit c25adbbd9c
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
db/src/main/resources/sql/user/create_readwrite_user.sql
View file

@ -12,10 +12,12 @@
-- See the License for the specific language governing permissions and -- See the License for the specific language governing permissions and
-- limitations under the License. -- limitations under the License.
-- --
-- Script to create a user with read-write permission to all tables. -- Script to create a user with read-write permission to all tables (except for
-- WRITE permissions to flyway_schema_history).
CREATE USER :username ENCRYPTED PASSWORD :'password'; CREATE USER :username ENCRYPTED PASSWORD :'password';
GRANT CONNECT ON DATABASE postgres TO :username; GRANT CONNECT ON DATABASE postgres TO :username;
GRANT USAGE ON SCHEMA public TO :username; GRANT USAGE ON SCHEMA public TO :username;
GRANT USAGE, SELECT ON ALL SEQUENCES IN SCHEMA public TO :username; GRANT USAGE, SELECT ON ALL SEQUENCES IN SCHEMA public TO :username;
GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA public TO :username; GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA public TO :username;
REVOKE INSERT, UPDATE, DELETE ON TABLE public.flyway_schema_history FROM :username;