From 46a9dfbbf31d52391dce6958edbebbccea5b1d87 Mon Sep 17 00:00:00 2001
From: Thomas Hooge <thomas@hoogi.de>
Date: Sat, 11 Dec 2021 20:33:23 +0100
Subject: [PATCH] Basis Datenbankberechtigungen

---
 pmv-grants.sql | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 pmv-grants.sql

diff --git a/pmv-grants.sql b/pmv-grants.sql
new file mode 100644
index 0000000..5d5c8eb
--- /dev/null
+++ b/pmv-grants.sql
@@ -0,0 +1,18 @@
+-- Berechtigungen
+
+CREATE ROLE sekretariat;
+CREATE ROLE schatzmeisterei;
+CREATE ROLE presse;
+
+-- Sekretariat (Generalsekretär)
+GRANT SELECT, INSERT, UPDATE, DELETE ON pmv.mitglied TO sekretariat;
+GRANT SELECT, INSERT, UPDATE, DELETE ON pmv.beitrag TO sekretariat;
+GRANT SELECT, INSERT, UPDATE, DELETE ON pmv.wahl TO sekretariat;
+GRANT SELECT, INSERT, UPDATE, DELETE ON pmv.wahlkreis TO sekretariat;
+
+-- Schatzmeisterei
+GRANT SELECT, INSERT, UPDATE ON pmv.buchung TO schatzmeisterei;
+
+-- Presse
+-- TODO Felder über einen View einschränken
+GRANT SELECT ON pmv.mitglied TO presse;