summaryrefslogtreecommitdiff
path: root/sql/modules/Roles.sql
diff options
context:
space:
mode:
Diffstat (limited to 'sql/modules/Roles.sql')
-rw-r--r--sql/modules/Roles.sql2
1 files changed, 2 insertions, 0 deletions
diff --git a/sql/modules/Roles.sql b/sql/modules/Roles.sql
index ca8e2533..9ef3d4c7 100644
--- a/sql/modules/Roles.sql
+++ b/sql/modules/Roles.sql
@@ -1400,6 +1400,8 @@ GRANT ALL ON transactions, entity_employee, customer, vendor TO public;
GRANT ALL ON pending_job, payments_queue TO PUBLIC;
GRANT ALL ON pending_job_id_seq TO public;
--TODO, lock recurring, pending_job, payment_queue down more
+-- Roles with no db permissions:
+CREATE ROLE "lsmb_<?lsmb dbname ?>__draft_edit" WITH INHERIT NOLOGIN;
-- CT: The following grant is required for now, but will hopefully become less
-- important when we get to 1.4 and can more sensibly lock things down.