WIP
This commit is contained in:
parent
54b057886c
commit
7fc1ae0650
204 changed files with 4345 additions and 134 deletions
41
PlanTempus.SqlManagement/Scripts/Script.sql
Normal file
41
PlanTempus.SqlManagement/Scripts/Script.sql
Normal file
|
|
@ -0,0 +1,41 @@
|
|||
|
||||
GRANT USAGE ON SCHEMA "system" TO heimdall;
|
||||
GRANT CREATE ON SCHEMA "system" TO heimdall
|
||||
|
||||
create schema "system"
|
||||
|
||||
ALTER DEFAULT PRIVILEGES FOR ROLE heimdall IN SCHEMA "system"
|
||||
GRANT ALL PRIVILEGES ON TABLES TO heimdall;
|
||||
|
||||
-- Og for eksisterende tabeller
|
||||
GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA "system" TO heimdall;
|
||||
|
||||
ALTER TABLE susers OWNER TO db_admin;
|
||||
GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA your_schema TO sathumper;
|
||||
|
||||
|
||||
CREATE ROLE heimdall WITH LOGIN PASSWORD '3911';
|
||||
COMMENT ON ROLE heimdall IS 'Security auditor and guardian';
|
||||
drop role heimdall
|
||||
|
||||
|
||||
set role 'heimdall'
|
||||
ALTER ROLE heimdall SET search_path = "system"
|
||||
drop table system.foo
|
||||
|
||||
SELECT CURRENT_ROLE;
|
||||
SELECT rolname FROM pg_roles
|
||||
select system_user()
|
||||
|
||||
SET ROLE heimdall;
|
||||
RESET ALL; -- Nulstil alle sessionsvariabler til deres standardværdier
|
||||
SHOW search_path; -- Burde nu vise den konfigurerede værdi
|
||||
|
||||
SHOW search_path;
|
||||
|
||||
create table system.foos(id int)
|
||||
|
||||
select * from system.foo
|
||||
select * from "system".organizations
|
||||
|
||||
|
||||
4
PlanTempus.SqlManagement/Scripts/SmartConfigSystem.sql
Normal file
4
PlanTempus.SqlManagement/Scripts/SmartConfigSystem.sql
Normal file
|
|
@ -0,0 +1,4 @@
|
|||
SELECT substring(datname, 5)::integer as dbnumber
|
||||
FROM pg_database
|
||||
WHERE datname LIKE 'ptdb%'
|
||||
ORDER BY dbnumber DESC
|
||||
24
PlanTempus.SqlManagement/Scripts/grant-privileges.sql
Normal file
24
PlanTempus.SqlManagement/Scripts/grant-privileges.sql
Normal file
|
|
@ -0,0 +1,24 @@
|
|||
CREATE ROLE sathumper WITH
|
||||
CREATEROLE
|
||||
CREATEDB
|
||||
LOGIN
|
||||
PASSWORD '3911';
|
||||
|
||||
CREATE SCHEMA "system";
|
||||
GRANT USAGE, CREATE ON SCHEMA "system" TO sathumper;
|
||||
GRANT ALL PRIVILEGES ON ALL SEQUENCES IN SCHEMA "system" TO sathumper;
|
||||
GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA "system" TO sathumper;
|
||||
|
||||
ALTER DEFAULT PRIVILEGES IN SCHEMA "system"
|
||||
GRANT ALL PRIVILEGES ON TABLES TO sathumper;
|
||||
|
||||
SELECT usename, useconfig
|
||||
FROM pg_user
|
||||
WHERE useconfig IS NOT NULL
|
||||
AND useconfig::text LIKE '%search_path%'
|
||||
|
||||
|
||||
ALTER ROLE sathumper1 SET search_path='ss32'
|
||||
|
||||
|
||||
|
||||
Loading…
Add table
Add a link
Reference in a new issue