DDLS-359b add connect for psql connections readonly user (#1713)

ministryofjustice · Oct 30, 2024 · 43cd768 · 43cd768
1 parent d9c415a
commit 43cd768
Show file tree

Hide file tree

Showing 5 changed files with 4 additions and 3 deletions.
diff --git a/api/app/scripts/readonly_user_setup/_1_readonly_user_connect.sql b/api/app/scripts/readonly_user_setup/_1_readonly_user_connect.sql
@@ -0,0 +1 @@
+GRANT CONNECT ON DATABASE api TO readonly_sql_user;
diff --git a/...r_setup/_1_readonly_user_grant_schema.sql → ...r_setup/_2_readonly_user_grant_schema.sql b/...r_setup/_1_readonly_user_grant_schema.sql → ...r_setup/_2_readonly_user_grant_schema.sql
diff --git a/...r_setup/_2_readonly_user_grant_select.sql → ...r_setup/_3_readonly_user_grant_select.sql b/...r_setup/_2_readonly_user_grant_select.sql → ...r_setup/_3_readonly_user_grant_select.sql
diff --git a/..._3_readonly_user_revoke_update_delete.sql → ..._4_readonly_user_revoke_update_delete.sql b/..._3_readonly_user_revoke_update_delete.sql → ..._4_readonly_user_revoke_update_delete.sql
diff --git a/orchestration/restore.sh b/orchestration/restore.sh
@@ -19,11 +19,11 @@ if [ "${DROP_PUBLIC}" == "yes" ]; then
 	echo "Recreating the public schema"
 	psql $POSTGRES_HOST_OPTS -d $POSTGRES_DATABASE -c "drop schema public cascade; create schema public;"
 	echo "Dropping the ddls145 schema"
-	psql $POSTGRES_HOST_OPTS -d $POSTGRES_DATABASE -c "drop schema ddls145 cascade;"
+	psql $POSTGRES_HOST_OPTS -d $POSTGRES_DATABASE -c "drop schema if exists ddls145 cascade;"
 	echo "Dropping the ddls330 schema"
-	psql $POSTGRES_HOST_OPTS -d $POSTGRES_DATABASE -c "drop schema ddls330 cascade;"
+	psql $POSTGRES_HOST_OPTS -d $POSTGRES_DATABASE -c "drop schema if exists ddls330 cascade;"
 	echo "Dropping the audit schema"
-	psql $POSTGRES_HOST_OPTS -d $POSTGRES_DATABASE -c "drop schema audit cascade;"
+	psql $POSTGRES_HOST_OPTS -d $POSTGRES_DATABASE -c "drop schema if exists audit cascade;"
 fi
 
 echo "Restoring ${LATEST_BACKUP}"
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		GRANT CONNECT ON DATABASE api TO readonly_sql_user;