apunkt/mike
1
0
Fork 0
mirror of https://github.com/willchen96/mike.git synced 2026-07-26 23:51:08 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

narrow service role schema grants

Browse source
This commit is contained in:
willchen96 2026-07-23 21:37:11 +08:00
parent 9399fce86d
commit b2dbb39c62
1 changed files with 9 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

14
backend/schema.sql
View file

@ -887,8 +887,12 @@ revoke all on public.courtlistener_citation_index from anon, authenticated;
revoke all on public.courtlistener_opinion_cluster_index from anon, authenticated; revoke all on public.courtlistener_opinion_cluster_index from anon, authenticated;
-- Tables created by this file are owned by the database bootstrap role. The -- Tables created by this file are owned by the database bootstrap role. The
-- backend connects as service_role, so grant it the privileges that the direct -- backend connects as service_role, so grant it only the data privileges that
-- browser roles above intentionally do not have. RLS is still enabled as -- the direct browser roles above intentionally do not have. RLS is still
-- defense in depth; service_role bypasses it for the backend data path. -- enabled as defense in depth; service_role bypasses it for the backend path.
grant all privileges on all tables in schema public to service_role; grant select, insert, update, delete
grant all privileges on all sequences in schema public to service_role; on all tables in schema public
to service_role;
grant usage, select
on all sequences in schema public
to service_role;