Docker solution to readonly user # 11

dragarcia · dragarcia · commit 9416c3df1d7e · 2020-05-05T16:01:57.000+08:00
diff --git a/docker/mnt/00-schema.sql b/docker/mnt/00-schema.sql
@@ -0,0 +1,14 @@
+-- Strip everyone on rights to the public schema except for the user postgres
+REVOKE ALL ON schema public FROM public;
+GRANT ALL ON schema public TO postgres;
+
+
+-- Provide read only access to the schema and its current content
+CREATE ROLE public_readonly;
+GRANT CONNECT ON DATABASE postgres TO public_readonly;
+GRANT USAGE ON SCHEMA public TO public_readonly;
+GRANT SELECT ON ALL TABLES IN SCHEMA public TO public_readonly;
+
+-- Provide read only access to future tables in the schema
+ALTER DEFAULT PRIVILEGES IN SCHEMA public
+GRANT SELECT ON TABLES TO public_readonly;
