Skip to content

Instantly share code, notes, and snippets.

@jirutka

jirutka/pg_change_db_owner.sh

Last active June 17, 2025 05:53
Show Gist options
  • Save jirutka/afa3ce62b1430abf7572 to your computer and use it in GitHub Desktop.
Save jirutka/afa3ce62b1430abf7572 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. jirutka revised this gist Sep 4, 2017. 2 changed files with 33 additions and 54 deletions.
    46 changes: 17 additions & 29 deletions pg_change_db_owner.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -1,8 +1,8 @@
    #!/bin/bash
    #!/bin/sh
    #
    # The MIT License
    #
    # Copyright 2014 Jakub Jirutka <[email protected]>.
    # Copyright 2014-2017 Jakub Jirutka <[email protected]>.
    #
    # Permission is hereby granted, free of charge, to any person obtaining a copy
    # of this software and associated documentation files (the "Software"), to deal
    @@ -59,25 +59,16 @@ pgexec_echo() {
    DB_NAME=''
    NEW_OWNER=''
    SCHEMA='public'
    while getopts "hd:o:s:" OPTION; do
    while getopts 'hd:o:s:' OPTION; do
    case $OPTION in
    h)
    usage
    exit 1
    ;;
    d)
    DB_NAME=$OPTARG
    ;;
    o)
    NEW_OWNER=$OPTARG
    ;;
    s)
    SCHEMA=$OPTARG
    ;;
    h) usage; exit 1;;
    d) DB_NAME=$OPTARG;;
    o) NEW_OWNER=$OPTARG;;
    s) SCHEMA=$OPTARG;;
    esac
    done

    if [[ -z "$DB_NAME" ]] || [[ -z "$NEW_OWNER" ]]; then
    if [ -z "$DB_NAME" ] || [ -z "$NEW_OWNER" ]; then
    usage
    exit 1
    fi
    @@ -86,25 +77,22 @@ fi
    IFS=\0

    # Change owner of schema itself.
    pgexec_echo "ALTER SCHEMA \"${SCHEMA}\" OWNER TO \"${NEW_OWNER}\";"
    pgexec_echo "ALTER SCHEMA \"$SCHEMA\" OWNER TO \"$NEW_OWNER\";"

    # Change owner of tables and views.
    for tbl in $(pgexec "SELECT table_name FROM information_schema.tables WHERE table_schema = '${SCHEMA}';") \
    $(pgexec "SELECT table_name FROM information_schema.views WHERE table_schema = '${SCHEMA}';"); do
    pgexec_echo "ALTER TABLE \"${SCHEMA}\".\"${tbl}\" OWNER TO ${NEW_OWNER};"
    for tbl in $(pgexec "SELECT table_name FROM information_schema.tables WHERE table_schema = '$SCHEMA';") \
    $(pgexec "SELECT table_name FROM information_schema.views WHERE table_schema = '$SCHEMA';"); do
    pgexec_echo "ALTER TABLE \"$SCHEMA\".\"$tbl\" OWNER TO $NEW_OWNER;"
    done

    # Change owner of sequences.
    for seq in $(pgexec "SELECT sequence_name FROM information_schema.sequences WHERE sequence_schema = '${SCHEMA}';"); do
    pgexec_echo "ALTER SEQUENCE \"${SCHEMA}\".\"${seq}\" OWNER TO ${NEW_OWNER};"
    for seq in $(pgexec "SELECT sequence_name FROM information_schema.sequences WHERE sequence_schema = '$SCHEMA';"); do
    pgexec_echo "ALTER SEQUENCE \"$SCHEMA\".\"$seq\" OWNER TO $NEW_OWNER;"
    done

    # Change owner of functions and procedures.
    for func in $(pgexec "SELECT quote_ident(p.proname) || '(' || pg_catalog.pg_get_function_identity_arguments(p.oid) || ')' \
    FROM pg_catalog.pg_proc p JOIN pg_catalog.pg_namespace n ON n.oid = p.pronamespace \
    WHERE n.nspname = '${SCHEMA}';"); do
    pgexec_echo "ALTER FUNCTION \"${SCHEMA}\".${func} OWNER TO ${NEW_OWNER};"
    FROM pg_catalog.pg_proc p JOIN pg_catalog.pg_namespace n ON n.oid = p.pronamespace \
    WHERE n.nspname = '$SCHEMA';"); do
    pgexec_echo "ALTER FUNCTION \"$SCHEMA\".$func OWNER TO $NEW_OWNER;"
    done

    # Revert separator back to default.
    unset IFS
    41 changes: 16 additions & 25 deletions pg_grant_read_to_db.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -1,8 +1,8 @@
    #!/bin/bash
    #!/bin/sh
    #
    # The MIT License
    #
    # Copyright 2014 Jakub Jirutka <[email protected]>.
    # Copyright 2014-2017 Jakub Jirutka <[email protected]>.
    #
    # Permission is hereby granted, free of charge, to any person obtaining a copy
    # of this software and associated documentation files (the "Software"), to deal
    @@ -48,37 +48,28 @@ pgexec() {
    DB_NAME=''
    ROLE=''
    SCHEMA='public'
    while getopts "hd:u:s:" OPTION; do
    while getopts 'hd:u:s:' OPTION; do
    case $OPTION in
    h)
    usage
    exit 1
    ;;
    d)
    DB_NAME=$OPTARG
    ;;
    u)
    ROLE=$OPTARG
    ;;
    s)
    SCHEMA=$OPTARG
    ;;
    h) usage; exit 1;;
    d) DB_NAME=$OPTARG;;
    u) ROLE=$OPTARG;;
    s) SCHEMA=$OPTARG;;
    esac
    done

    if [[ -z "$DB_NAME" ]] || [[ -z "$ROLE" ]]; then
    if [ -z "$DB_NAME" ] || [ -z "$ROLE" ]; then
    usage
    exit 1
    fi

    pgexec "GRANT CONNECT ON DATABASE ${DB_NAME} TO ${ROLE};
    GRANT USAGE ON SCHEMA ${SCHEMA} TO ${ROLE};
    GRANT SELECT ON ALL TABLES IN SCHEMA ${SCHEMA} TO ${ROLE};
    GRANT SELECT ON ALL SEQUENCES IN SCHEMA ${SCHEMA} TO ${ROLE};
    ALTER DEFAULT PRIVILEGES IN SCHEMA ${SCHEMA} GRANT SELECT ON TABLES TO ${ROLE};
    ALTER DEFAULT PRIVILEGES IN SCHEMA ${SCHEMA} GRANT SELECT ON SEQUENCES TO ${ROLE};"
    pgexec "GRANT CONNECT ON DATABASE $DB_NAME TO $ROLE;
    GRANT USAGE ON SCHEMA $SCHEMA TO $ROLE;
    GRANT SELECT ON ALL TABLES IN SCHEMA $SCHEMA TO $ROLE;
    GRANT SELECT ON ALL SEQUENCES IN SCHEMA $SCHEMA TO $ROLE;
    ALTER DEFAULT PRIVILEGES IN SCHEMA $SCHEMA GRANT SELECT ON TABLES TO $ROLE;
    ALTER DEFAULT PRIVILEGES IN SCHEMA $SCHEMA GRANT SELECT ON SEQUENCES TO $ROLE;"

    # Uncomment to also grant privileges on all functions/procedures in the schema.
    # It's usually NOT what you want - functions can modify data!
    #pgexec "GRANT EXECUTE ON ALL FUNCTIONS IN SCHEMA ${SCHEMA} TO ${ROLE};
    #ALTER DEFAULT PRIVILEGES IN SCHEMA ${SCHEMA} GRANT EXECUTE ON FUNCTIONS TO ${ROLE};"
    #pgexec "GRANT EXECUTE ON ALL FUNCTIONS IN SCHEMA $SCHEMA TO $ROLE;
    #ALTER DEFAULT PRIVILEGES IN SCHEMA $SCHEMA GRANT EXECUTE ON FUNCTIONS TO $ROLE;"
  2. jirutka revised this gist Aug 14, 2014. 1 changed file with 8 additions and 5 deletions.
    13 changes: 8 additions & 5 deletions pg_grant_read_to_db.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -27,8 +27,8 @@ usage() {
    cat <<- EOF
    usage: $0 options
    This script grants read-only privileges to a specified role on all tables, sequences,
    functions and procedures in a database schema and sets them as default.
    This script grants read-only privileges to a specified role on all tables, views
    and sequences in a database schema and sets them as default.
    OPTIONS:
    -h Show this message
    @@ -75,7 +75,10 @@ pgexec "GRANT CONNECT ON DATABASE ${DB_NAME} TO ${ROLE};
    GRANT USAGE ON SCHEMA ${SCHEMA} TO ${ROLE};
    GRANT SELECT ON ALL TABLES IN SCHEMA ${SCHEMA} TO ${ROLE};
    GRANT SELECT ON ALL SEQUENCES IN SCHEMA ${SCHEMA} TO ${ROLE};
    GRANT EXECUTE ON ALL FUNCTIONS IN SCHEMA ${SCHEMA} TO ${ROLE};
    ALTER DEFAULT PRIVILEGES IN SCHEMA ${SCHEMA} GRANT SELECT ON TABLES TO ${ROLE};
    ALTER DEFAULT PRIVILEGES IN SCHEMA ${SCHEMA} GRANT SELECT ON SEQUENCES TO ${ROLE};
    ALTER DEFAULT PRIVILEGES IN SCHEMA ${SCHEMA} GRANT EXECUTE ON FUNCTIONS TO ${ROLE};"
    ALTER DEFAULT PRIVILEGES IN SCHEMA ${SCHEMA} GRANT SELECT ON SEQUENCES TO ${ROLE};"

    # Uncomment to also grant privileges on all functions/procedures in the schema.
    # It's usually NOT what you want - functions can modify data!
    #pgexec "GRANT EXECUTE ON ALL FUNCTIONS IN SCHEMA ${SCHEMA} TO ${ROLE};
    #ALTER DEFAULT PRIVILEGES IN SCHEMA ${SCHEMA} GRANT EXECUTE ON FUNCTIONS TO ${ROLE};"
  3. jirutka revised this gist Aug 14, 2014. 2 changed files with 78 additions and 78 deletions.
    90 changes: 45 additions & 45 deletions pg_change_db_owner.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -26,60 +26,60 @@


    usage() {
    cat <<- EOF
    usage: $0 options
    This script changes ownership for all tables, views, sequences and functions in
    a database schema and also owner of the schema itself.
    Note: If you want to change the ownership of all objects, in the specified database,
    owned by a database role, then you can simply use command "REASSIGN OWNED".
    OPTIONS:
    -h Show this message
    -d Database name
    -o New owner name
    -s Schema (defaults to public)
    EOF
    cat <<- EOF
    usage: $0 options
    This script changes ownership for all tables, views, sequences and functions in
    a database schema and also owner of the schema itself.
    Note: If you want to change the ownership of all objects, in the specified database,
    owned by a database role, then you can simply use command "REASSIGN OWNED".
    OPTIONS:
    -h Show this message
    -d Database name
    -o New owner name
    -s Schema (defaults to public)
    EOF
    }

    pgexec() {
    local cmd=$1
    psql --no-psqlrc --no-align --tuples-only --record-separator=\0 --quiet \
    --command="$cmd" "$DB_NAME"
    local cmd=$1
    psql --no-psqlrc --no-align --tuples-only --record-separator=\0 --quiet \
    --command="$cmd" "$DB_NAME"
    }

    pgexec_echo() {
    local cmd=$1
    psql --no-psqlrc --no-align --tuples-only --record-separator=\0 --quiet \
    --echo-queries --command="$cmd" "$DB_NAME"
    local cmd=$1
    psql --no-psqlrc --no-align --tuples-only --record-separator=\0 --quiet \
    --echo-queries --command="$cmd" "$DB_NAME"
    }


    DB_NAME=''
    NEW_OWNER=''
    SCHEMA='public'
    while getopts "hd:o:s:" OPTION; do
    case $OPTION in
    h)
    usage
    exit 1
    ;;
    d)
    DB_NAME=$OPTARG
    ;;
    o)
    NEW_OWNER=$OPTARG
    ;;
    s)
    SCHEMA=$OPTARG
    ;;
    esac
    case $OPTION in
    h)
    usage
    exit 1
    ;;
    d)
    DB_NAME=$OPTARG
    ;;
    o)
    NEW_OWNER=$OPTARG
    ;;
    s)
    SCHEMA=$OPTARG
    ;;
    esac
    done

    if [[ -z "$DB_NAME" ]] || [[ -z "$NEW_OWNER" ]]; then
    usage
    exit 1
    usage
    exit 1
    fi

    # Using the NULL byte as the separator as its the only character disallowed from PG table names.
    @@ -90,21 +90,21 @@ pgexec_echo "ALTER SCHEMA \"${SCHEMA}\" OWNER TO \"${NEW_OWNER}\";"

    # Change owner of tables and views.
    for tbl in $(pgexec "SELECT table_name FROM information_schema.tables WHERE table_schema = '${SCHEMA}';") \
    $(pgexec "SELECT table_name FROM information_schema.views WHERE table_schema = '${SCHEMA}';"); do
    pgexec_echo "ALTER TABLE \"${SCHEMA}\".\"${tbl}\" OWNER TO ${NEW_OWNER};"
    $(pgexec "SELECT table_name FROM information_schema.views WHERE table_schema = '${SCHEMA}';"); do
    pgexec_echo "ALTER TABLE \"${SCHEMA}\".\"${tbl}\" OWNER TO ${NEW_OWNER};"
    done

    # Change owner of sequences.
    for seq in $(pgexec "SELECT sequence_name FROM information_schema.sequences WHERE sequence_schema = '${SCHEMA}';"); do
    pgexec_echo "ALTER SEQUENCE \"${SCHEMA}\".\"${seq}\" OWNER TO ${NEW_OWNER};"
    pgexec_echo "ALTER SEQUENCE \"${SCHEMA}\".\"${seq}\" OWNER TO ${NEW_OWNER};"
    done

    # Change owner of functions and procedures.
    for func in $(pgexec "SELECT quote_ident(p.proname) || '(' || pg_catalog.pg_get_function_identity_arguments(p.oid) || ')' \
    FROM pg_catalog.pg_proc p JOIN pg_catalog.pg_namespace n ON n.oid = p.pronamespace \
    WHERE n.nspname = '${SCHEMA}';"); do
    pgexec_echo "ALTER FUNCTION \"${SCHEMA}\".${func} OWNER TO ${NEW_OWNER};"
    FROM pg_catalog.pg_proc p JOIN pg_catalog.pg_namespace n ON n.oid = p.pronamespace \
    WHERE n.nspname = '${SCHEMA}';"); do
    pgexec_echo "ALTER FUNCTION \"${SCHEMA}\".${func} OWNER TO ${NEW_OWNER};"
    done

    # Revert separator back to default.
    unset IFS
    unset IFS
    66 changes: 33 additions & 33 deletions pg_grant_read_to_db.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -24,51 +24,51 @@


    usage() {
    cat <<- EOF
    usage: $0 options
    This script grants read-only privileges to a specified role on all tables, sequences,
    functions and procedures in a database schema and sets them as default.
    OPTIONS:
    -h Show this message
    -d Database name
    -u Role name
    -s Schema (defaults to public)
    EOF
    cat <<- EOF
    usage: $0 options
    This script grants read-only privileges to a specified role on all tables, sequences,
    functions and procedures in a database schema and sets them as default.
    OPTIONS:
    -h Show this message
    -d Database name
    -u Role name
    -s Schema (defaults to public)
    EOF
    }

    pgexec() {
    local cmd=$1
    psql --no-psqlrc --no-align --tuples-only --record-separator=\0 --quiet \
    --echo-queries --command="$cmd" "$DB_NAME"
    local cmd=$1
    psql --no-psqlrc --no-align --tuples-only --record-separator=\0 --quiet \
    --echo-queries --command="$cmd" "$DB_NAME"
    }


    DB_NAME=''
    ROLE=''
    SCHEMA='public'
    while getopts "hd:u:s:" OPTION; do
    case $OPTION in
    h)
    usage
    exit 1
    ;;
    d)
    DB_NAME=$OPTARG
    ;;
    u)
    ROLE=$OPTARG
    ;;
    s)
    SCHEMA=$OPTARG
    ;;
    esac
    case $OPTION in
    h)
    usage
    exit 1
    ;;
    d)
    DB_NAME=$OPTARG
    ;;
    u)
    ROLE=$OPTARG
    ;;
    s)
    SCHEMA=$OPTARG
    ;;
    esac
    done

    if [[ -z "$DB_NAME" ]] || [[ -z "$ROLE" ]]; then
    usage
    exit 1
    usage
    exit 1
    fi

    pgexec "GRANT CONNECT ON DATABASE ${DB_NAME} TO ${ROLE};
    @@ -78,4 +78,4 @@ GRANT SELECT ON ALL SEQUENCES IN SCHEMA ${SCHEMA} TO ${ROLE};
    GRANT EXECUTE ON ALL FUNCTIONS IN SCHEMA ${SCHEMA} TO ${ROLE};
    ALTER DEFAULT PRIVILEGES IN SCHEMA ${SCHEMA} GRANT SELECT ON TABLES TO ${ROLE};
    ALTER DEFAULT PRIVILEGES IN SCHEMA ${SCHEMA} GRANT SELECT ON SEQUENCES TO ${ROLE};
    ALTER DEFAULT PRIVILEGES IN SCHEMA ${SCHEMA} GRANT EXECUTE ON FUNCTIONS TO ${ROLE};"
    ALTER DEFAULT PRIVILEGES IN SCHEMA ${SCHEMA} GRANT EXECUTE ON FUNCTIONS TO ${ROLE};"
  4. jirutka created this gist Aug 14, 2014.
    110 changes: 110 additions & 0 deletions pg_change_db_owner.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,110 @@
    #!/bin/bash
    #
    # The MIT License
    #
    # Copyright 2014 Jakub Jirutka <[email protected]>.
    #
    # Permission is hereby granted, free of charge, to any person obtaining a copy
    # of this software and associated documentation files (the "Software"), to deal
    # in the Software without restriction, including without limitation the rights
    # to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
    # copies of the Software, and to permit persons to whom the Software is
    # furnished to do so, subject to the following conditions:
    #
    # The above copyright notice and this permission notice shall be included in
    # all copies or substantial portions of the Software.
    #
    # THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
    # IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
    # FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
    # AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
    # LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
    # OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
    # THE SOFTWARE.

    # Credit: Based on http://stackoverflow.com/a/2686185/305019 by Alex Soto


    usage() {
    cat <<- EOF
    usage: $0 options
    This script changes ownership for all tables, views, sequences and functions in
    a database schema and also owner of the schema itself.
    Note: If you want to change the ownership of all objects, in the specified database,
    owned by a database role, then you can simply use command "REASSIGN OWNED".
    OPTIONS:
    -h Show this message
    -d Database name
    -o New owner name
    -s Schema (defaults to public)
    EOF
    }
    pgexec() {
    local cmd=$1
    psql --no-psqlrc --no-align --tuples-only --record-separator=\0 --quiet \
    --command="$cmd" "$DB_NAME"
    }
    pgexec_echo() {
    local cmd=$1
    psql --no-psqlrc --no-align --tuples-only --record-separator=\0 --quiet \
    --echo-queries --command="$cmd" "$DB_NAME"
    }
    DB_NAME=''
    NEW_OWNER=''
    SCHEMA='public'
    while getopts "hd:o:s:" OPTION; do
    case $OPTION in
    h)
    usage
    exit 1
    ;;
    d)
    DB_NAME=$OPTARG
    ;;
    o)
    NEW_OWNER=$OPTARG
    ;;
    s)
    SCHEMA=$OPTARG
    ;;
    esac
    done
    if [[ -z "$DB_NAME" ]] || [[ -z "$NEW_OWNER" ]]; then
    usage
    exit 1
    fi
    # Using the NULL byte as the separator as its the only character disallowed from PG table names.
    IFS=\0
    # Change owner of schema itself.
    pgexec_echo "ALTER SCHEMA \"${SCHEMA}\" OWNER TO \"${NEW_OWNER}\";"
    # Change owner of tables and views.
    for tbl in $(pgexec "SELECT table_name FROM information_schema.tables WHERE table_schema = '${SCHEMA}';") \
    $(pgexec "SELECT table_name FROM information_schema.views WHERE table_schema = '${SCHEMA}';"); do
    pgexec_echo "ALTER TABLE \"${SCHEMA}\".\"${tbl}\" OWNER TO ${NEW_OWNER};"
    done
    # Change owner of sequences.
    for seq in $(pgexec "SELECT sequence_name FROM information_schema.sequences WHERE sequence_schema = '${SCHEMA}';"); do
    pgexec_echo "ALTER SEQUENCE \"${SCHEMA}\".\"${seq}\" OWNER TO ${NEW_OWNER};"
    done
    # Change owner of functions and procedures.
    for func in $(pgexec "SELECT quote_ident(p.proname) || '(' || pg_catalog.pg_get_function_identity_arguments(p.oid) || ')' \
    FROM pg_catalog.pg_proc p JOIN pg_catalog.pg_namespace n ON n.oid = p.pronamespace \
    WHERE n.nspname = '${SCHEMA}';"); do
    pgexec_echo "ALTER FUNCTION \"${SCHEMA}\".${func} OWNER TO ${NEW_OWNER};"
    done
    # Revert separator back to default.
    unset IFS
    81 changes: 81 additions & 0 deletions pg_grant_read_to_db.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,81 @@
    #!/bin/bash
    #
    # The MIT License
    #
    # Copyright 2014 Jakub Jirutka <[email protected]>.
    #
    # Permission is hereby granted, free of charge, to any person obtaining a copy
    # of this software and associated documentation files (the "Software"), to deal
    # in the Software without restriction, including without limitation the rights
    # to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
    # copies of the Software, and to permit persons to whom the Software is
    # furnished to do so, subject to the following conditions:
    #
    # The above copyright notice and this permission notice shall be included in
    # all copies or substantial portions of the Software.
    #
    # THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
    # IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
    # FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
    # AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
    # LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
    # OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
    # THE SOFTWARE.


    usage() {
    cat <<- EOF
    usage: $0 options
    This script grants read-only privileges to a specified role on all tables, sequences,
    functions and procedures in a database schema and sets them as default.
    OPTIONS:
    -h Show this message
    -d Database name
    -u Role name
    -s Schema (defaults to public)
    EOF
    }
    pgexec() {
    local cmd=$1
    psql --no-psqlrc --no-align --tuples-only --record-separator=\0 --quiet \
    --echo-queries --command="$cmd" "$DB_NAME"
    }
    DB_NAME=''
    ROLE=''
    SCHEMA='public'
    while getopts "hd:u:s:" OPTION; do
    case $OPTION in
    h)
    usage
    exit 1
    ;;
    d)
    DB_NAME=$OPTARG
    ;;
    u)
    ROLE=$OPTARG
    ;;
    s)
    SCHEMA=$OPTARG
    ;;
    esac
    done
    if [[ -z "$DB_NAME" ]] || [[ -z "$ROLE" ]]; then
    usage
    exit 1
    fi
    pgexec "GRANT CONNECT ON DATABASE ${DB_NAME} TO ${ROLE};
    GRANT USAGE ON SCHEMA ${SCHEMA} TO ${ROLE};
    GRANT SELECT ON ALL TABLES IN SCHEMA ${SCHEMA} TO ${ROLE};
    GRANT SELECT ON ALL SEQUENCES IN SCHEMA ${SCHEMA} TO ${ROLE};
    GRANT EXECUTE ON ALL FUNCTIONS IN SCHEMA ${SCHEMA} TO ${ROLE};
    ALTER DEFAULT PRIVILEGES IN SCHEMA ${SCHEMA} GRANT SELECT ON TABLES TO ${ROLE};
    ALTER DEFAULT PRIVILEGES IN SCHEMA ${SCHEMA} GRANT SELECT ON SEQUENCES TO ${ROLE};
    ALTER DEFAULT PRIVILEGES IN SCHEMA ${SCHEMA} GRANT EXECUTE ON FUNCTIONS TO ${ROLE};"