--
-- Primary GEMMA roles
--
CREATE ROLE waterway_user;
CREATE ROLE waterway_admin IN ROLE waterway_user;
CREATE ROLE sys_admin IN ROLE waterway_admin;

--
-- Special roles
--

-- A role that is intended to be used for password reset only
CREATE ROLE pw_reset;

-- A role that is intended to be used for backend- or
-- GeoServer-connections on which SET ROLE has to be used to
-- gain privileges of a specific role
CREATE ROLE metamorph NOINHERIT;