chore: grant privileges to postgrest_api

flanksource · Nov 16, 2023 · 76efaba · 76efaba
1 parent 5976ee6
commit 76efaba
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/migrate/migrate.go b/migrate/migrate.go
@@ -91,6 +91,17 @@ func grantPostgrestRolesToCurrentUser(pool *sql.DB, connection string) error {
 			return err
 		}
 		logger.Debugf("Granted postgrest_api to %s", user)
+
+		grantQuery := `
+            GRANT SELECT, UPDATE, DELETE, INSERT ON ALL TABLES IN SCHEMA public TO postgrest_api;
+            ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT SELECT, UPDATE, DELETE, INSERT ON TABLES TO postgrest_api;
+            GRANT USAGE, SELECT ON ALL SEQUENCES IN SCHEMA public TO postgrest_api;
+        `
+		if _, err := pool.Exec(grantQuery); err != nil {
+			return err
+		}
+		logger.Debugf("Granted privileges to postgrest_api", user)
+
 	}
 
 	isPostgrestAnonGranted, err := checkIfRoleIsGranted(pool, "postgrest_anon", user)