git.ozlabs.org Git - patchwork/blob - lib/sql/grant-all.postgres.sql

   1 BEGIN;
   2 -- give necessary permissions to the web server. Becuase the admin is all
   3 -- web-based, these need to be quite permissive
   4 GRANT SELECT, UPDATE, INSERT, DELETE ON
   5         auth_message,
   6         django_session,
   7         django_site,
   8         django_admin_log,
   9         django_content_type,
  10         auth_group_permissions,
  11         auth_user,
  12         auth_user_groups,
  13         auth_group,
  14         auth_user_user_permissions,
  15         auth_permission,
  16         patchwork_emailconfirmation,
  17         patchwork_state,
  18         patchwork_comment,
  19         patchwork_person,
  20         patchwork_userprofile,
  21         patchwork_userprofile_maintainer_projects,
  22         patchwork_project,
  23         patchwork_bundle,
  24         patchwork_bundlepatch,
  25         patchwork_patch
  26 TO "www-data";
  27 GRANT SELECT, UPDATE ON
  28         auth_group_id_seq,
  29         auth_group_permissions_id_seq,
  30         auth_message_id_seq,
  31         auth_permission_id_seq,
  32         auth_user_groups_id_seq,
  33         auth_user_id_seq,
  34         auth_user_user_permissions_id_seq,
  35         django_admin_log_id_seq,
  36         django_content_type_id_seq,
  37         django_site_id_seq,
  38         patchwork_bundle_id_seq,
  39         patchwork_bundlepatch_id_seq,
  40         patchwork_comment_id_seq,
  41         patchwork_patch_id_seq,
  42         patchwork_person_id_seq,
  43         patchwork_project_id_seq,
  44         patchwork_state_id_seq,
  45         patchwork_emailconfirmation_id_seq,
  46         patchwork_userprofile_id_seq,
  47         patchwork_userprofile_maintainer_projects_id_seq
  48 TO "www-data";
  49
  50 -- allow the mail user (in this case, 'nobody') to add patches
  51 GRANT INSERT, SELECT ON
  52         patchwork_patch,
  53         patchwork_comment,
  54         patchwork_person
  55 TO "nobody";
  56 GRANT SELECT ON
  57         patchwork_project,
  58         patchwork_state
  59 TO "nobody";
  60 GRANT UPDATE, SELECT ON
  61         patchwork_patch_id_seq,
  62         patchwork_person_id_seq,
  63         patchwork_comment_id_seq
  64 TO "nobody";
  65
  66 COMMIT;
  67