chore: roles with admin

chart/cas-cif/Chart.lock

@@ -11,5 +11,5 @@ dependencies:
 - name: certbot
   repository: https://bcdevops.github.io/certbot
   version: 0.1.3
-digest: sha256:22a3c8a861907a570a2415e8c4b5c0a5c7f6ae164207507f093b0bfaa752c8cf
-generated: "2024-02-23T14:03:27.259123-08:00"
+digest: sha256:d2da5fb2e1380ca061fdadb0e4cbe54137f1e3d43f90afe245339ddb320a771b
+generated: "2024-12-16T11:23:41.617911-08:00"

schema/deploy/create_roles.sql

@@ -12,39 +12,39 @@ begin
     from   pg_catalog.pg_roles
     where  rolname = 'cif_internal') then
 
-    create role cif_internal;
+    create role cif_internal with admin current_user;
   end if;
 
   if not exists (
     select true
     from   pg_catalog.pg_roles
     where  rolname = 'cif_external') then
 
-    create role cif_external;
+    create role cif_external with admin current_user;
   end if;
 
   if not exists (
     select true
     from   pg_catalog.pg_roles
     where  rolname = 'cif_admin') then
 
-    create role cif_admin;
+    create role cif_admin with admin current_user;
   end if;
 
   if not exists (
     select true
     from   pg_catalog.pg_roles
     where  rolname = 'cif_guest') then
 
-    create role cif_guest;
+    create role cif_guest with admin current_user;
   end if;
 
   if not exists (
     select true
     from   pg_catalog.pg_roles
     where  rolname = 'cifapp') then
 
-    create user cifapp;
+    create user cifapp with admin current_user;
   end if;
 
   grant cif_admin, cif_internal, cif_external, cif_guest to cifapp;