Skip to content

Commit 95f42b1

Browse files
committed
updating rockd migration
1 parent 74de8ee commit 95f42b1

File tree

4 files changed

+21
-6
lines changed

4 files changed

+21
-6
lines changed
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
../../../../../../submodules/postgis-tile-utils/sql/01-tms-defs.sql
1+
../../../../../../../submodules/postgis-tile-utils/sql/01-tms-defs.sql
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
../../../../../../submodules/postgis-tile-utils/sql/02-tile-utils.sql
1+
../../../../../../../submodules/postgis-tile-utils/sql/02-tile-utils.sql

py-modules/cli/macrostrat/cli/subsystems/rockd/migrations/0012-user-privileges.sql

Lines changed: 17 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -20,6 +20,9 @@ $$;
2020
ALTER DATABASE rockd OWNER TO rockd;
2121
ALTER SCHEMA public OWNER TO rockd;
2222
ALTER SCHEMA modules OWNER TO rockd;
23+
ALTER SCHEMA topology OWNER TO rockd;
24+
ALTER SCHEMA tile_utils OWNER TO rockd;
25+
2326

2427
--REASSIGN OWNED BY "macrostrat-admin" TO rockd;
2528
GRANT CREATE ON DATABASE rockd TO rockd;
@@ -30,18 +33,30 @@ GRANT SELECT ON ALL TABLES IN SCHEMA public TO "rockd-reader";
3033
ALTER DEFAULT PRIVILEGES IN SCHEMA public
3134
GRANT SELECT ON TABLES TO "rockd-reader";
3235

36+
GRANT USAGE ON SCHEMA tile_utils TO "rockd-reader";
37+
GRANT SELECT ON ALL TABLES IN SCHEMA tile_utils TO "rockd-reader";
38+
ALTER DEFAULT PRIVILEGES IN SCHEMA tile_utils
39+
GRANT SELECT ON TABLES TO "rockd-reader";
40+
3341
--granting all permissions to the rockd user.
3442
--TODO determine if we need to revoke macrostrat-admin access. They have read/write access to the rockd db too.
3543
ALTER DEFAULT PRIVILEGES IN SCHEMA public
3644
GRANT SELECT, INSERT, UPDATE, DELETE ON TABLES TO rockd;
37-
ALTER DEFAULT PRIVILEGES IN SCHEMA public
45+
ALTER DEFAULT PRIVILEGES IN SCHEMA modules
46+
GRANT USAGE, SELECT, UPDATE ON SEQUENCES TO rockd;
47+
ALTER DEFAULT PRIVILEGES IN SCHEMA topology
48+
GRANT USAGE, SELECT, UPDATE ON SEQUENCES TO rockd;
49+
ALTER DEFAULT PRIVILEGES IN SCHEMA tile_utils
3850
GRANT USAGE, SELECT, UPDATE ON SEQUENCES TO rockd;
39-
4051
--if we need to update permissions for all tables run query below
4152
GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA public TO rockd;
4253
GRANT USAGE, SELECT, UPDATE ON ALL SEQUENCES IN SCHEMA public TO rockd;
4354
GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA modules TO rockd;
4455
GRANT USAGE, SELECT, UPDATE ON ALL SEQUENCES IN SCHEMA modules TO rockd;
56+
GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA topology TO rockd;
57+
GRANT USAGE, SELECT, UPDATE ON ALL SEQUENCES IN SCHEMA topology TO rockd;
58+
GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA tile_utils TO rockd;
59+
GRANT USAGE, SELECT, UPDATE ON ALL SEQUENCES IN SCHEMA tile_utils TO rockd;
4560

4661

4762
--permission denied for schema macrostrat

py-modules/cli/macrostrat/cli/subsystems/storage.py

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -77,8 +77,8 @@ def _s3_users():
7777
def s3_bucket_migration(
7878
dry_run: bool = Option(False, "--dry-run", "-n", help="Do everything except write"),
7979
show_cmd: bool = Option(False, help="Print the rclone command for debugging"),
80-
src: str = Option(..., help="Source bucket that contains photos"),
81-
dst: str = Option(..., help="Destination bucket to copy photos into"),
80+
src: str = Option("rockd-photo-backup", help="Source bucket that contains photos"),
81+
dst: str = Option("rockd-photo-prod", help="Destination bucket to copy photos into"),
8282
):
8383
endpoint = settings.get("storage.endpoint")
8484
b_access = settings.get("storage.rockd_backup_access")

0 commit comments

Comments
 (0)