Skip to content

Instantly share code, notes, and snippets.

@nullablemind
Forked from oinopion/read-access.sql
Created April 12, 2018 07:51
Show Gist options
  • Select an option

  • Save nullablemind/b48c4811bd0aa007e86492a16852fb38 to your computer and use it in GitHub Desktop.

Select an option

Save nullablemind/b48c4811bd0aa007e86492a16852fb38 to your computer and use it in GitHub Desktop.

Revisions

  1. @oinopion oinopion created this gist Oct 5, 2016.
    13 changes: 13 additions & 0 deletions read-access.sql
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,13 @@
    -- Create a group
    CREATE ROLE readaccess;

    -- Grant access to existing tables
    GRANT USAGE ON SCHEMA public TO readaccess;
    GRANT SELECT ON ALL TABLES IN SCHEMA public TO readaccess;

    -- Grant access to future tables
    ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT SELECT ON TABLES TO readaccess;

    -- Create a final user with password
    CREATE USER tomek WITH PASSWORD 'secret';
    GRANT readaccess TO tomek;