diff --git a/database-grants/terraform/prod/schemas/reporting/main.tf b/database-grants/terraform/prod/schemas/reporting/main.tf index e9fd81dc..8332497f 100644 --- a/database-grants/terraform/prod/schemas/reporting/main.tf +++ b/database-grants/terraform/prod/schemas/reporting/main.tf @@ -5,4 +5,47 @@ module "microservice_schema" { service_user_table_grants = ["SELECT", "INSERT", "UPDATE", "DELETE"] # allow delete from this schema } +resource "postgresql_grant" "stakeholder_schema" { + database = "treetracker" + role = "s_reporting" + schema = "stakeholder" + object_type = "schema" + privileges = ["USAGE"] +} + +resource "postgresql_grant" "stakeholder_children_function" { + database = "treetracker" + role = "s_reporting" + schema = "stakeholder" + object_type = "function" + privileges = ["EXECUTE"] +} + +resource "postgresql_grant" "stakeholder_table" { + database = "treetracker" + role = "s_reporting" + schema = "stakeholder" + object_type = "table" + privileges = ["SELECT"] +} + +resource "postgresql_grant" "regions_schema" { + database = "treetracker" + role = "s_reporting" + schema = "regions" + object_type = "schema" + privileges = ["USAGE"] +} + +resource "postgresql_grant" "region_table" { + database = "treetracker" + role = "s_reporting" + schema = "regions" + object_type = "table" + privileges = ["SELECT"] +} + + + + diff --git a/database-grants/terraform/prod/schemas/stakeholder/main.tf b/database-grants/terraform/prod/schemas/stakeholder/main.tf index 7eee1c98..6bb114a3 100644 --- a/database-grants/terraform/prod/schemas/stakeholder/main.tf +++ b/database-grants/terraform/prod/schemas/stakeholder/main.tf @@ -4,4 +4,12 @@ module "microservice_schema" { schema = "stakeholder" } +resource "postgresql_grant" "readonly_entity" { + database = "treetracker" + role = "s_stakeholder" + schema = "public" + object_type = "table" + privileges = ["SELECT"] +} +