diff schema/auth.sql @ 1630:f6218f11062a

Cleanup GRANTs for waterway_admin
author Tom Gottfried <tom@intevation.de>
date Wed, 19 Dec 2018 18:12:03 +0100
parents 8ad51ad5a9ee
children 37ee25bc2bbe
line wrap: on
line diff
--- a/schema/auth.sql	Wed Dec 19 17:59:31 2018 +0100
+++ b/schema/auth.sql	Wed Dec 19 18:12:03 2018 +0100
@@ -34,15 +34,13 @@
 --
 -- Extended privileges for waterway_admin
 --
-GRANT INSERT, UPDATE ON ALL TABLES IN SCHEMA waterway TO waterway_admin;
--- TODO: will there ever be UPDATEs or can we drop that due to historicisation?
+GRANT INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA waterway
+    TO waterway_admin;
+-- TODO: will there ever be UPDATEs and DELETEs or can we drop that for
+-- imported data due to historicisation? Special tables like
+-- import_configuration will further need UPDATE and DELETE privileges.
 GRANT INSERT, UPDATE, DELETE ON
     users.templates, users.user_templates TO waterway_admin;
-GRANT INSERT, UPDATE, DELETE ON
-    waterway.imports, waterway.import_logs, waterway.track_imports,
-    waterway.sounding_results, waterway.import_configuration,
-    waterway.bottlenecks
-    TO waterway_admin;
 
 --
 -- Extended privileges for sys_admin