Mercurial > gemma
comparison schema/roles.sql @ 319:ac760b0f22a9
Add special role for password reset
As password reset is exposed without requiring a login, let this role
have privileges limited to reseting passwords, and only reseting passwords.
| author | Tom Gottfried <tom@intevation.de> |
|---|---|
| date | Thu, 02 Aug 2018 13:06:39 +0200 |
| parents | 88d21c29cf04 |
| children | 5611cf72cc92 |
comparison
equal
deleted
inserted
replaced
| 318:1a2dfd9351e9 | 319:ac760b0f22a9 |
|---|---|
| 2 -- Primary GEMMA roles | 2 -- Primary GEMMA roles |
| 3 -- | 3 -- |
| 4 CREATE ROLE waterway_user; | 4 CREATE ROLE waterway_user; |
| 5 CREATE ROLE waterway_admin IN ROLE waterway_user; | 5 CREATE ROLE waterway_admin IN ROLE waterway_user; |
| 6 CREATE ROLE sys_admin IN ROLE waterway_admin; | 6 CREATE ROLE sys_admin IN ROLE waterway_admin; |
| 7 | |
| 8 -- | |
| 9 -- Special roles | |
| 10 -- | |
| 11 | |
| 12 -- A role that is intended to be used for password reset only | |
| 13 CREATE ROLE pw_reset; |