dba/grant-minimum-permissions.sh

   1 #!/bin/sh
   2 #
   3 # Grant permissions to AWL tables for Web application and DBA users
   4 #
   5 # Since we don't know anything about the database connection we echo
   6 # the SQL for our caller to pipe into the database.
   7 #
   8
   9 APPUSER=${1:-"general"}
  10 DBAUSER=${2}
  11
  12 cat <<EOPERMS
  13 GRANT SELECT,INSERT,UPDATE ON
  14     usr
  15   , usr_setting
  16   , roles
  17   , role_member
  18   , session
  19   , tmp_password
  20   TO ${APPUSER};
  21
  22 GRANT SELECT,UPDATE ON
  23     usr_user_no_seq
  24   , session_session_id_seq
  25   TO ${APPUSER};
  26
  27 GRANT SELECT ON
  28     supported_locales
  29   , awl_db_revision
  30   TO ${APPUSER};
  31
  32 GRANT DELETE ON
  33     tmp_password
  34   , role_member
  35   TO ${APPUSER};
  36
  37 EOPERMS
  38
  39 if [ -n "${DBAUSER}" ]; then
  40   cat <<EOPERMS
  41 GRANT ALL ON
  42     usr
  43   , usr_setting
  44   , roles
  45   , role_member
  46   , session
  47   , tmp_password
  48   , usr_user_no_seq
  49   , session_session_id_seq
  50   , supported_locales
  51   , awl_db_revision
  52   , tmp_password
  53   , role_member
  54   TO ${DBAUSER};
  55
  56 EOPERMS
  57
  58 fi