view schema/roles.sql @ 319:ac760b0f22a9

Add special role for password reset As password reset is exposed without requiring a login, let this role have privileges limited to reseting passwords, and only reseting passwords.
author Tom Gottfried <tom@intevation.de>
date Thu, 02 Aug 2018 13:06:39 +0200
parents 88d21c29cf04
children 5611cf72cc92
line wrap: on
line source

--
-- Primary GEMMA roles
--
CREATE ROLE waterway_user;
CREATE ROLE waterway_admin IN ROLE waterway_user;
CREATE ROLE sys_admin IN ROLE waterway_admin;

--
-- Special roles
--

-- A role that is intended to be used for password reset only
CREATE ROLE pw_reset;