identMap = ''
# MAPNAME SYSTEM-USERNAME PG-USERNAME
user root ${owner}
+ user ${owner} ${db}
'';
};
security.pass.secrets."postgresql/pass/${owner}" = {};
GRANT SELECT ON pg_catalog.pg_database TO ${owner};
GRANT SELECT ON pg_catalog.pg_roles TO ${owner};
GRANT SELECT ON pg_catalog.pg_tablespace TO ${owner};
+ -- Reallow this to allow pgadmin3
+ GRANT SELECT ON pg_catalog.pg_user TO ${owner};
-- Enable PL/PGSQL
CREATE OR REPLACE LANGUAGE plpgsql;