Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

(Sharon) We also need to create a schema for our legacy system data to which users only have read access

(John) This is outside the scope of Metadb,  but can, of course, co-exist in the same database.  In this case you could create a didicated role with ‘inherit’ which would function more or less as a group,  create the schema,  grant read-only privs to the role on the schema, and then add users to the role.    Example:CREATE my_ro_schema_role INHERIT;
CREATE SCHEMA my_ro_schema;
GRANT USAGE ON SCHEMA my_ro_schema TO my_ro_schema_role;
GRANT SELECT ON ALL TABLES IN SCHEMA my_ro_schema to my_ro_schema_role;
GRANT my_ro_schema_role to $USER1;
GRANT my_ro_schema_role to $USER2;
etc.

...