From f59af0fc6b761dcdf71d41d62e878191ed44d688 Mon Sep 17 00:00:00 2001
From: "David M. Syzdek" <syzdek@bindlebinaries.com>
Date: Mon, 13 May 2019 13:06:26 -0800
Subject: updating radius roles

---
 notes/projects/radius/sql/radius-roles.sql | 20 +++++++++++++++++---
 1 file changed, 17 insertions(+), 3 deletions(-)

diff --git a/notes/projects/radius/sql/radius-roles.sql b/notes/projects/radius/sql/radius-roles.sql
index c609c6f..c90ed55 100644
--- a/notes/projects/radius/sql/radius-roles.sql
+++ b/notes/projects/radius/sql/radius-roles.sql
@@ -20,7 +20,7 @@ CREATE ROLE radius
                     NOINHERIT
                     NOLOGIN
                     NOREPLICATION
-                    ADMIN wheel;
+                    ADMIN           wheel;
 
 
 CREATE ROLE radius_admin
@@ -29,7 +29,19 @@ CREATE ROLE radius_admin
                     NOCREATEROLE
                     INHERIT
                     NOLOGIN
-                    NOREPLICATION;
+                    NOREPLICATION
+                    ADMIN           radius;
+
+
+CREATE ROLE radius_app
+   WITH             NOSUPERUSER
+                    NOCREATEDB
+                    NOCREATEROLE
+                    INHERIT
+                    NOLOGIN
+                    NOREPLICATION
+                    ADMIN           radius
+                    ROLE            radius_admin;
 
 
 CREATE ROLE radius_user
@@ -40,7 +52,9 @@ CREATE ROLE radius_user
                     NOLOGIN
                     NOREPLICATION
                     NOBYPASSRLS
-                    ADMIN radius_admin;
+                    ADMIN           radius
+                    ROLE            radius_admin,
+                                    radius_app;
 
 
 /* end of sql */
-- 
cgit v1.2.3