fix: give readonly user access to new schemas

Greenstand · Dec 20, 2023 · 43a96fd · 43a96fd
1 parent 8bf20d7
commit 43a96fd
Showing 1 changed file with 54 additions and 0 deletions.
diff --git a/database-grants/terraform/prod/read-only-user.tf b/database-grants/terraform/prod/read-only-user.tf
@@ -320,3 +320,57 @@ resource "postgresql_default_privileges" "read_only_messaging_tables" {
   privileges  = ["SELECT"]
 }
 
+
+resource "postgresql_grant" "readonlyyuser_usage_keycloak" {
+  provider    = "postgresql.treetracker"
+  database    = "treetracker"
+  role        = "readonlyuser"
+  schema      = "keycloak"
+  object_type = "schema"
+  privileges  = ["USAGE"]
+}
+
+resource "postgresql_grant" "readonlyyuser_select_keycloak" {
+  provider    = "postgresql.treetracker"
+  database    = "treetracker"
+  role        = "readonlyuser"
+  schema      = "keycloak"
+  object_type = "table"
+  privileges  = ["SELECT"]
+}
+
+resource "postgresql_grant" "readonlyyuser_sequence_keycloak" {
+  provider    = "postgresql.treetracker"
+  database    = "treetracker"
+  role        = "readonlyuser"
+  schema      = "keycloak"
+  object_type = "sequence"
+  privileges  = ["SELECT"]
+}
+
+resource "postgresql_grant" "readonlyyuser_usage_denormalized" {
+  provider    = "postgresql.treetracker"
+  database    = "treetracker"
+  role        = "readonlyuser"
+  schema      = "denormalized"
+  object_type = "schema"
+  privileges  = ["USAGE"]
+}
+
+resource "postgresql_grant" "readonlyyuser_select_denormalized" {
+  provider    = "postgresql.treetracker"
+  database    = "treetracker"
+  role        = "readonlyuser"
+  schema      = "denormalized"
+  object_type = "table"
+  privileges  = ["SELECT"]
+}
+
+resource "postgresql_grant" "readonlyyuser_sequence_denormalized" {
+  provider    = "postgresql.treetracker"
+  database    = "treetracker"
+  role        = "readonlyuser"
+  schema      = "denormalized"
+  object_type = "sequence"
+  privileges  = ["SELECT"]
+}