Hey all,
I wrote a tool that can manage PostgreSQL permissions from a config
file. The config file describes your desired roles and grants and syncs
them to your PostgreSQL cluster. This allows you to manage your
permissions in Git, for example.
You can find detailed instructions and the binaries at
https://github.com/SnoozeThis-org/pgperms.
Here's some example config to show its features:
> roles:
> yourname:
> password: SCRAM-SHA-256$4096:...
> createdb: true
> databases:
> - mydatabase
> schemas:
> - mydatabase.myschema
> database_privileges:
> - roles: [yourname]
> privileges: [CONNECT, TEMPORARY]
> databases: [mydatabase]
> schema_privileges:
> - roles: [yourname]
> privileges: [CREATE, USAGE]
> schemas: [mydatabase.myschema]
> table_privileges:
> - roles: [yourname]
> privileges: [SELECT, INSERT, UPDATE]
> tables: [mydatabase.otherschema.*]
Let me know if you find any bugs or need any missing features. It'd be
great to hear people find this useful :)
-- Jille
Development of pgperms is sponsored by SnoozeThis: a bot that can hold
on to your blocked issues until they're actionable
(https://www.snoozethis.com).