diff --git a/initdb/02_6_signalk_roles.sql b/initdb/02_6_signalk_roles.sql index b70627b..7090d33 100644 --- a/initdb/02_6_signalk_roles.sql +++ b/initdb/02_6_signalk_roles.sql @@ -115,29 +115,7 @@ GRANT SELECT ON TABLE api.total_info_view TO user_role; GRANT SELECT ON TABLE api.stats_logs_view TO user_role; GRANT SELECT ON TABLE api.stats_moorages_view TO user_role; GRANT SELECT ON TABLE api.eventlogs_view TO user_role; --- Update ownership for security user_role as run by web user. --- Web listing ---ALTER VIEW api.stays_view OWNER TO user_role; ---ALTER VIEW api.moorages_view OWNER TO user_role; ---ALTER VIEW api.logs_view OWNER TO user_role; ---ALTER VIEW api.vessel_p_view OWNER TO user_role; ---ALTER VIEW api.monitoring_view OWNER TO user_role; --- Remove all permissions except select ---REVOKE UPDATE, TRUNCATE, REFERENCES, DELETE, TRIGGER, INSERT ON TABLE api.stays_view FROM user_role; ---REVOKE UPDATE, TRUNCATE, REFERENCES, DELETE, TRIGGER, INSERT ON TABLE api.moorages_view FROM user_role; ---REVOKE UPDATE, TRUNCATE, REFERENCES, DELETE, TRIGGER, INSERT ON TABLE api.logs_view FROM user_role; ---REVOKE UPDATE, TRUNCATE, REFERENCES, DELETE, TRIGGER, INSERT ON TABLE api.monitoring_view FROM user_role; - --- Allow read and update on VIEWS --- Web detail view ---ALTER VIEW api.log_view OWNER TO user_role; --- Remove all permissions except select and update ---REVOKE TRUNCATE, DELETE, TRIGGER, INSERT ON TABLE api.log_view FROM user_role; - -ALTER VIEW api.vessels_view OWNER TO user_role; --- Remove all permissions except select and update -REVOKE TRUNCATE, DELETE, TRIGGER, INSERT ON TABLE api.vessels_view FROM user_role; - +GRANT SELECT ON TABLE api.vessels_view TO user_role; -- Vessel: -- nologin