Merge pull request #20 from getindata/feature/optimize_default_roles_…

…definition feat: Add dynamic table permissions and optimize admin permissions list
getindata · Jan 8, 2024 · 98ce721 · 98ce721
2 parents 622dfb0 + d4fcd4e
commit 98ce721
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/locals.tf b/locals.tf
@@ -27,11 +27,11 @@ locals {
     }
     transformer = {
       database_grants = ["USAGE", "MONITOR", "CREATE SCHEMA"]
-      schema_grants   = ["USAGE", "CREATE TEMPORARY TABLE", "CREATE TAG", "CREATE PIPE", "CREATE PROCEDURE", "CREATE MATERIALIZED VIEW", "CREATE TABLE", "CREATE FILE FORMAT", "CREATE STAGE", "CREATE TASK", "CREATE FUNCTION", "CREATE EXTERNAL TABLE", "CREATE SEQUENCE", "CREATE VIEW", "CREATE STREAM"]
+      schema_grants   = ["USAGE", "CREATE TEMPORARY TABLE", "CREATE TAG", "CREATE PIPE", "CREATE PROCEDURE", "CREATE MATERIALIZED VIEW", "CREATE TABLE", "CREATE FILE FORMAT", "CREATE STAGE", "CREATE TASK", "CREATE FUNCTION", "CREATE EXTERNAL TABLE", "CREATE SEQUENCE", "CREATE VIEW", "CREATE STREAM", "CREATE DYNAMIC TABLE"]
     }
     admin = {
-      database_grants = ["USAGE", "MONITOR", "MODIFY", "CREATE SCHEMA"]
-      schema_grants   = ["USAGE", "MONITOR", "MODIFY", "CREATE TEMPORARY TABLE", "CREATE TAG", "CREATE PIPE", "CREATE PROCEDURE", "CREATE MATERIALIZED VIEW", "CREATE ROW ACCESS POLICY", "CREATE TABLE", "CREATE FILE FORMAT", "CREATE STAGE", "CREATE TASK", "CREATE FUNCTION", "CREATE EXTERNAL TABLE", "ADD SEARCH OPTIMIZATION", "CREATE SEQUENCE", "CREATE MASKING POLICY", "CREATE VIEW", "CREATE STREAM"]
+      database_grants = ["ALL PRIVILEGES"]
+      schema_grants   = ["ALL PRIVILEGES"]
     }
   }