/*
 *  IP Engineering RADIUS Servers
 *
 *  radius-roles.sql - creates base radius roles
 *
 *  Usage:  psql -f radius-roles.sql
 *
 */


SET ROLE wheel;
SET client_min_messages TO WARNING;
\set ON_ERROR_STOP on


CREATE ROLE radius
   WITH             NOSUPERUSER
                    NOCREATEDB
                    NOCREATEROLE
                    NOINHERIT
                    NOLOGIN
                    NOREPLICATION
                    ADMIN           wheel;


CREATE ROLE radius_admin
   WITH             NOSUPERUSER
                    NOCREATEDB
                    NOCREATEROLE
                    INHERIT
                    NOLOGIN
                    NOREPLICATION
                    ADMIN           radius;


CREATE ROLE radius_app
   WITH             NOSUPERUSER
                    NOCREATEDB
                    NOCREATEROLE
                    INHERIT
                    NOLOGIN
                    NOREPLICATION
                    ADMIN           radius
                    ROLE            radius_admin;


CREATE ROLE radius_user
   WITH             NOSUPERUSER
                    NOCREATEDB
                    NOCREATEROLE
                    INHERIT
                    NOLOGIN
                    NOREPLICATION
                    NOBYPASSRLS
                    ADMIN           radius
                    ROLE            radius_admin,
                                    radius_app;


/* end of sql */