notes/projects/radius/sql/radius-roles.sql


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60

/*
 *  IP Engineering RADIUS Servers
 *
 *  radius-roles.sql - creates base radius roles
 *
 *  Usage:  psql -f radius-roles.sql
 *
 */


SET ROLE wheel;
SET client_min_messages TO WARNING;
\set ON_ERROR_STOP on


CREATE ROLE radius
   WITH             NOSUPERUSER
                    NOCREATEDB
                    NOCREATEROLE
                    NOINHERIT
                    NOLOGIN
                    NOREPLICATION
                    ADMIN           wheel;


CREATE ROLE radius_admin
   WITH             NOSUPERUSER
                    NOCREATEDB
                    NOCREATEROLE
                    INHERIT
                    NOLOGIN
                    NOREPLICATION
                    ADMIN           radius;


CREATE ROLE radius_app
   WITH             NOSUPERUSER
                    NOCREATEDB
                    NOCREATEROLE
                    INHERIT
                    NOLOGIN
                    NOREPLICATION
                    ADMIN           radius
                    ROLE            radius_admin;


CREATE ROLE radius_user
   WITH             NOSUPERUSER
                    NOCREATEDB
                    NOCREATEROLE
                    INHERIT
                    NOLOGIN
                    NOREPLICATION
                    NOBYPASSRLS
                    ADMIN           radius
                    ROLE            radius_admin,
                                    radius_app;


/* end of sql */