comparison database/schema/classify.sql @ 55:40f64a96481f

Adjust database user arrangements and grant schema privs.
author David A. Holland
date Sun, 10 Apr 2022 19:36:29 -0400
parents cd36b49f4437
children
comparison
equal deleted inserted replaced
54:36d91dfe017f 55:40f64a96481f
353 UNION SELECT * FROM textclass_data_ordered 353 UNION SELECT * FROM textclass_data_ordered
354 UNION SELECT * FROM tagclass_stringdata_ordered 354 UNION SELECT * FROM tagclass_stringdata_ordered
355 ORDER BY schemeordering 355 ORDER BY schemeordering
356 ; 356 ;
357 357
358 ------------------------------------------------------------
359 -- permissions
360
361 -- Only administrators can add or rearrange schemes.
362 GRANT SELECT, INSERT, UPDATE, DELETE ON hierclass_names TO swallowtail_admin;
363 GRANT SELECT, INSERT, UPDATE, DELETE ON hierclass_values TO swallowtail_admin;
364 GRANT SELECT, INSERT, UPDATE, DELETE ON flatclass_names TO swallowtail_admin;
365 GRANT SELECT, INSERT, UPDATE, DELETE ON flatclass_values TO swallowtail_admin;
366 GRANT SELECT, INSERT, UPDATE, DELETE ON textclass_names TO swallowtail_admin;
367 GRANT SELECT, INSERT, UPDATE, DELETE ON tagclass_names TO swallowtail_admin;
368 GRANT SELECT, INSERT, UPDATE, DELETE ON tagclass_values TO swallowtail_admin;
369
370 GRANT SELECT ON hierclass_names TO swallowtail_writer;
371 GRANT SELECT ON hierclass_values TO swallowtail_writer;
372 GRANT SELECT ON flatclass_names TO swallowtail_writer;
373 GRANT SELECT ON flatclass_values TO swallowtail_writer;
374 GRANT SELECT ON textclass_names TO swallowtail_writer;
375 GRANT SELECT ON tagclass_names TO swallowtail_writer;
376 GRANT SELECT ON tagclass_values TO swallowtail_writer;
377
378 GRANT SELECT ON hierclass_names TO swallowtail_reader;
379 GRANT SELECT ON hierclass_values TO swallowtail_reader;
380 GRANT SELECT ON flatclass_names TO swallowtail_reader;
381 GRANT SELECT ON flatclass_values TO swallowtail_reader;
382 GRANT SELECT ON textclass_names TO swallowtail_reader;
383 GRANT SELECT ON tagclass_names TO swallowtail_reader;
384 GRANT SELECT ON tagclass_values TO swallowtail_reader;
385
386 GRANT SELECT ON hierclass_names TO swallowtail_public;
387 GRANT SELECT ON hierclass_values TO swallowtail_public;
388 GRANT SELECT ON flatclass_names TO swallowtail_public;
389 GRANT SELECT ON flatclass_values TO swallowtail_public;
390 GRANT SELECT ON textclass_names TO swallowtail_public;
391 GRANT SELECT ON tagclass_names TO swallowtail_public;
392 GRANT SELECT ON tagclass_values TO swallowtail_public;
393
394 -- The data, however, is ordinarily accessible.
395 GRANT SELECT, INSERT, UPDATE, DELETE ON hierclass_data TO swallowtail_admin;
396 GRANT SELECT, INSERT, UPDATE, DELETE ON flatclass_data TO swallowtail_admin;
397 GRANT SELECT, INSERT, UPDATE, DELETE ON textclass_data TO swallowtail_admin;
398 GRANT SELECT, INSERT, UPDATE, DELETE ON tagclass_data TO swallowtail_admin;
399 GRANT SELECT, INSERT, UPDATE, DELETE ON tagclass_data TO swallowtail_admin;
400
401 GRANT SELECT, INSERT, UPDATE, DELETE ON hierclass_data TO swallowtail_writer;
402 GRANT SELECT, INSERT, UPDATE, DELETE ON flatclass_data TO swallowtail_writer;
403 GRANT SELECT, INSERT, UPDATE, DELETE ON textclass_data TO swallowtail_writer;
404 GRANT SELECT, INSERT, UPDATE, DELETE ON tagclass_data TO swallowtail_writer;
405 GRANT SELECT, INSERT, UPDATE, DELETE ON tagclass_data TO swallowtail_writer;
406
407 GRANT SELECT ON hierclass_data TO swallowtail_reader, swallowtail_public;
408 GRANT SELECT ON flatclass_data TO swallowtail_reader, swallowtail_public;
409 GRANT SELECT ON textclass_data TO swallowtail_reader, swallowtail_public;
410 GRANT SELECT ON tagclass_data TO swallowtail_reader, swallowtail_public;
411 GRANT SELECT ON tagclass_data TO swallowtail_reader, swallowtail_public;
412
413 -- The views are generally readable.
414 GRANT SELECT ON tagclass_stringdata TO swallowtail_admin;
415 GRANT SELECT ON tagclass_stringdata TO swallowtail_writer;
416 GRANT SELECT ON tagclass_stringdata TO swallowtail_reader;
417 GRANT SELECT ON tagclass_stringdata TO swallowtail_public;
418
419 GRANT SELECT ON hierclass_data_ordered TO swallowtail_admin;
420 GRANT SELECT ON hierclass_data_ordered TO swallowtail_writer;
421 GRANT SELECT ON hierclass_data_ordered TO swallowtail_reader;
422 GRANT SELECT ON hierclass_data_ordered TO swallowtail_public;
423
424 GRANT SELECT ON flatclass_data_ordered TO swallowtail_admin;
425 GRANT SELECT ON flatclass_data_ordered TO swallowtail_writer;
426 GRANT SELECT ON flatclass_data_ordered TO swallowtail_reader;
427 GRANT SELECT ON flatclass_data_ordered TO swallowtail_public;
428
429 GRANT SELECT ON textclass_data_ordered TO swallowtail_admin;
430 GRANT SELECT ON textclass_data_ordered TO swallowtail_writer;
431 GRANT SELECT ON textclass_data_ordered TO swallowtail_reader;
432 GRANT SELECT ON textclass_data_ordered TO swallowtail_public;
433
434 GRANT SELECT ON tagclass_data_ordered TO swallowtail_admin;
435 GRANT SELECT ON tagclass_data_ordered TO swallowtail_writer;
436 GRANT SELECT ON tagclass_data_ordered TO swallowtail_reader;
437 GRANT SELECT ON tagclass_data_ordered TO swallowtail_public;
438
439 GRANT SELECT ON tagclass_stringdata_ordered TO swallowtail_admin;
440 GRANT SELECT ON tagclass_stringdata_ordered TO swallowtail_writer;
441 GRANT SELECT ON tagclass_stringdata_ordered TO swallowtail_reader;
442 GRANT SELECT ON tagclass_stringdata_ordered TO swallowtail_public;
443
444 GRANT SELECT ON classifications TO swallowtail_admin;
445 GRANT SELECT ON classifications TO swallowtail_writer;
446 GRANT SELECT ON classifications TO swallowtail_reader;
447 GRANT SELECT ON classifications TO swallowtail_public;
448