create-schema.sql

BEGIN;
    GRANT __OWNER__ TO __PGUSER__;
    CREATE SCHEMA IF NOT EXISTS AUTHORIZATION __OWNER__;
    GRANT USAGE ON SCHEMA __OWNER__ TO __READ_ONLY_USER__;
    GRANT USAGE ON SCHEMA __OWNER__ TO __ADMIN_USER__;
    GRANT SELECT ON ALL TABLES IN SCHEMA __OWNER__ TO __READ_ONLY_USER__;
    GRANT ALL ON ALL TABLES IN SCHEMA __OWNER__ TO __ADMIN_USER__;
    GRANT ALL ON ALL SEQUENCES IN SCHEMA __OWNER__ TO __ADMIN_USER__;
    GRANT ALL ON ALL FUNCTIONS IN SCHEMA __OWNER__ TO __ADMIN_USER__;
    ALTER DEFAULT PRIVILEGES FOR ROLE __OWNER__ IN SCHEMA __OWNER__ GRANT SELECT ON TABLES TO __READ_ONLY_USER__;
    ALTER DEFAULT PRIVILEGES FOR ROLE __OWNER__ IN SCHEMA __OWNER__ GRANT ALL ON TABLES TO __ADMIN_USER__;
    ALTER DEFAULT PRIVILEGES FOR ROLE __OWNER__ IN SCHEMA __OWNER__ GRANT ALL ON SEQUENCES TO __ADMIN_USER__;
    ALTER DEFAULT PRIVILEGES FOR ROLE __OWNER__ IN SCHEMA __OWNER__ GRANT ALL ON FUNCTIONS TO __ADMIN_USER__;
    REVOKE __OWNER__ FROM __PGUSER__;
END;