script-build-and-framework-tmp/script_build_host/migrations/mysql_phase_three_grants.sql.example

-- Substitute database and account names in deployment automation. Do not run as runtime.
-- The migration administrator executes this after Alembic 0003 and then revokes the old writer.

GRANT SELECT ON `${SCRIPT_BUILD_DATABASE}`.* TO `${SCRIPT_BUILD_READ_USER}`@`${SCRIPT_BUILD_DB_HOST}`;

GRANT SELECT ON `${SCRIPT_BUILD_DATABASE}`.* TO `${SCRIPT_BUILD_RUNTIME_USER}`@`${SCRIPT_BUILD_DB_HOST}`;
GRANT INSERT, UPDATE, DELETE ON `${SCRIPT_BUILD_DATABASE}`.script_build_candidate_paragraph_v
  TO `${SCRIPT_BUILD_RUNTIME_USER}`@`${SCRIPT_BUILD_DB_HOST}`;
GRANT INSERT, UPDATE, DELETE ON `${SCRIPT_BUILD_DATABASE}`.script_build_candidate_element_v
  TO `${SCRIPT_BUILD_RUNTIME_USER}`@`${SCRIPT_BUILD_DB_HOST}`;
GRANT INSERT, UPDATE, DELETE ON `${SCRIPT_BUILD_DATABASE}`.script_build_candidate_paragraph_element_v
  TO `${SCRIPT_BUILD_RUNTIME_USER}`@`${SCRIPT_BUILD_DB_HOST}`;
GRANT INSERT, UPDATE ON `${SCRIPT_BUILD_DATABASE}`.script_build_runtime_record_v
  TO `${SCRIPT_BUILD_RUNTIME_USER}`@`${SCRIPT_BUILD_DB_HOST}`;
GRANT UPDATE (is_favorited, is_deleted) ON `${SCRIPT_BUILD_DATABASE}`.script_build_record
  TO `${SCRIPT_BUILD_RUNTIME_USER}`@`${SCRIPT_BUILD_DB_HOST}`;
GRANT INSERT, UPDATE, DELETE ON `${SCRIPT_BUILD_DATABASE}`.script_build_mission_binding
  TO `${SCRIPT_BUILD_RUNTIME_USER}`@`${SCRIPT_BUILD_DB_HOST}`;
GRANT INSERT, UPDATE, DELETE ON `${SCRIPT_BUILD_DATABASE}`.script_build_input_snapshot
  TO `${SCRIPT_BUILD_RUNTIME_USER}`@`${SCRIPT_BUILD_DB_HOST}`;
GRANT INSERT, UPDATE, DELETE ON `${SCRIPT_BUILD_DATABASE}`.script_build_artifact_version
  TO `${SCRIPT_BUILD_RUNTIME_USER}`@`${SCRIPT_BUILD_DB_HOST}`;
GRANT INSERT, UPDATE, DELETE ON `${SCRIPT_BUILD_DATABASE}`.script_build_publication
  TO `${SCRIPT_BUILD_RUNTIME_USER}`@`${SCRIPT_BUILD_DB_HOST}`;
GRANT INSERT, UPDATE, DELETE ON `${SCRIPT_BUILD_DATABASE}`.script_build_http_command
  TO `${SCRIPT_BUILD_RUNTIME_USER}`@`${SCRIPT_BUILD_DB_HOST}`;
GRANT INSERT, UPDATE, DELETE ON `${SCRIPT_BUILD_DATABASE}`.script_build_task_plan_step
  TO `${SCRIPT_BUILD_RUNTIME_USER}`@`${SCRIPT_BUILD_DB_HOST}`;

GRANT SELECT ON `${SCRIPT_BUILD_DATABASE}`.* TO `${SCRIPT_BUILD_FINAL_USER}`@`${SCRIPT_BUILD_DB_HOST}`;
GRANT INSERT, UPDATE, DELETE ON `${SCRIPT_BUILD_DATABASE}`.script_build_paragraph
  TO `${SCRIPT_BUILD_FINAL_USER}`@`${SCRIPT_BUILD_DB_HOST}`;
GRANT INSERT, UPDATE, DELETE ON `${SCRIPT_BUILD_DATABASE}`.script_build_element
  TO `${SCRIPT_BUILD_FINAL_USER}`@`${SCRIPT_BUILD_DB_HOST}`;
GRANT INSERT, UPDATE, DELETE ON `${SCRIPT_BUILD_DATABASE}`.script_build_paragraph_element
  TO `${SCRIPT_BUILD_FINAL_USER}`@`${SCRIPT_BUILD_DB_HOST}`;
GRANT UPDATE ON `${SCRIPT_BUILD_DATABASE}`.script_build_record
  TO `${SCRIPT_BUILD_FINAL_USER}`@`${SCRIPT_BUILD_DB_HOST}`;
GRANT UPDATE ON `${SCRIPT_BUILD_DATABASE}`.script_build_mission_binding
  TO `${SCRIPT_BUILD_FINAL_USER}`@`${SCRIPT_BUILD_DB_HOST}`;
GRANT UPDATE ON `${SCRIPT_BUILD_DATABASE}`.script_build_artifact_version
  TO `${SCRIPT_BUILD_FINAL_USER}`@`${SCRIPT_BUILD_DB_HOST}`;
GRANT INSERT, UPDATE ON `${SCRIPT_BUILD_DATABASE}`.script_build_publication
  TO `${SCRIPT_BUILD_FINAL_USER}`@`${SCRIPT_BUILD_DB_HOST}`;

-- Deployment-specific old writer account:
-- REVOKE ALL PRIVILEGES, GRANT OPTION FROM `old_script_build_writer`@`${SCRIPT_BUILD_DB_HOST}`;