You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
43 lines
1.8 KiB
43 lines
1.8 KiB
2 months ago
|
/*
|
||
|
|
* Copyright 1999-2018 Alibaba Group Holding Ltd.
|
||
|
|
*
|
||
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
||
|
|
* you may not use this file except in compliance with the License.
|
||
|
|
* You may obtain a copy of the License at
|
||
|
|
*
|
||
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
||
|
|
*
|
||
|
|
* Unless required by applicable law or agreed to in writing, software
|
||
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
||
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
|
|
* See the License for the specific language governing permissions and
|
||
|
|
* limitations under the License.
|
||
|
|
*/
|
||
|
|
|
||
|
|
/*
|
||
|
|
* Optional: grant read/write on existing Nacos tables to application role `nacos` only.
|
||
|
|
*
|
||
|
|
* When to use:
|
||
|
|
* Load pg-schema.sql as a DBA/superuser (tables then belong to that role). Create the app user:
|
||
|
|
* CREATE USER nacos WITH PASSWORD 'your-password';
|
||
|
|
* Then run this script while connected to the Nacos database as the same role that owns the tables
|
||
|
|
* (often superuser), so privileges apply to all current objects.
|
||
|
|
*
|
||
|
|
* What you get:
|
||
|
|
* USAGE on public schema, SELECT/INSERT/UPDATE/DELETE on all tables, USAGE+SELECT on sequences
|
||
|
|
* (covers bigserial / identity). No CREATE/DROP on schema, no superuser.
|
||
|
|
*
|
||
|
|
* CONNECT: use `psql -d your_nacos_db` so the session can open the DB, or from another database run:
|
||
|
|
* GRANT CONNECT ON DATABASE your_nacos_db TO nacos;
|
||
|
|
*/
|
||
|
|
|
||
|
|
GRANT USAGE ON SCHEMA public TO nacos;
|
||
|
|
GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA public TO nacos;
|
||
|
|
GRANT USAGE, SELECT ON ALL SEQUENCES IN SCHEMA public TO nacos;
|
||
|
|
|
||
|
|
-- Objects created later by the same owner (e.g. future migrations run as superuser):
|
||
|
|
ALTER DEFAULT PRIVILEGES IN SCHEMA public
|
||
|
|
GRANT SELECT, INSERT, UPDATE, DELETE ON TABLES TO nacos;
|
||
|
|
ALTER DEFAULT PRIVILEGES IN SCHEMA public
|
||
|
|
GRANT USAGE, SELECT ON SEQUENCES TO nacos;
|