--- a/database/init/users.sql	Sun May 26 23:24:45 2013 -0400
+++ b/database/init/users.sql	Mon May 27 23:15:31 2013 -0400
@@ -1,8 +1,14 @@
 -- Database user initialization.
 -- Needs to be done as database superuser.
 --
--- The 'swallowtail' user will have ordinary access to the database;
--- the 'swallowtail-admin' user will have full access to the database.
+-- The users:
+--    swallowtail_admin: owns the database tables
+--    swallowtail_writer: has write access
+--    swallowtail: has readonly access to everything
+--    swallowtail_public: cannot see confidential PRs
+--
 
+create user swallowtail_admin;
+create user swallowtail_writer;
 create user swallowtail;
-create user swallowtail_admin;
+create user swallowtail_public;