~launchpad-pqm/launchpad/devel

#
# Possible permissions: SELECT, INSERT, UPDATE, EXECUTE
#
# Note that we can't have INSERT only tables if we are using SQLObject, as it
# creates new entries by first doing an insert (to get the id) and then
# issuing an update
[DEFAULT]
# Objects in these schemas are publicly readable or executable. *not* writable
public_schemas=ts2

[public]
# The pubic role is automatically granted to all users by PostgreSQL
type=group
public.person_sort_key(text, text)         = EXECUTE
public.valid_name(text)                    = EXECUTE
public.valid_bug_name(text)                = EXECUTE
public.valid_branch_name(text)             = EXECUTE
public.valid_version(text)                 =
public.valid_debian_version(text)          = EXECUTE
public.valid_cve(text)                     = EXECUTE
public.valid_absolute_url(text)            = EXECUTE
public.valid_fingerprint(text)             = EXECUTE
public.valid_keyid(text)                   = EXECUTE
public.sane_version(text)                  = EXECUTE
public.sha1(text)                          = EXECUTE
public.is_person(text)                     = EXECUTE
public.is_team(integer)                    = EXECUTE
public.is_team(text)                       = EXECUTE
public.is_printable_ascii(text)            = EXECUTE
public.sleep_for_testing(double precision) = EXECUTE
public.launchpaddatabaserevision           = SELECT
public.fticache                            =

[ro]
# A user will full readonly access to the database. Generally used for
# interactive querying
type=user
groups=read

[launchpad]
# The main Z3 application
type=user
groups=write
public.binaryandsourcepackagenameview   = SELECT
public.binarypackagepublishinghistory   = SELECT
public.bountysubscription               = SELECT, INSERT, UPDATE, DELETE
public.bugcve                           = SELECT, INSERT, DELETE
public.continent                        = SELECT
public.cve                              = SELECT, INSERT, UPDATE
public.cverefobsolete                   = SELECT, UPDATE
public.cvereference                     = SELECT, INSERT
public.developmentmanifest              = SELECT, INSERT, UPDATE, DELETE
public.distributionbounty               = SELECT, INSERT, UPDATE
public.distributionmirror               = SELECT, INSERT, UPDATE
public.distroreleaselanguage            = SELECT, INSERT, UPDATE
public.distroreleasepackagecache        = SELECT
public.distributionsourcepackagecache   = SELECT
public.emailaddress                     = SELECT, INSERT, UPDATE, DELETE
public.karmacache                       = SELECT
public.karmacategory                    = SELECT
public.karmatotalcache                  = SELECT
public.launchpadstatistic               = SELECT
public.logintoken                       = SELECT, INSERT, UPDATE, DELETE
public.messagechunk                     = SELECT, INSERT
public.mirrordistroarchrelease          = SELECT, INSERT
public.mirrorproberecord                = SELECT, INSERT
public.mirrordistroreleasesource        = SELECT, INSERT
public.packagebugcontact                = SELECT, INSERT, UPDATE, DELETE
public.personlanguage                   = SELECT, INSERT, UPDATE, DELETE
public.poexportrequest                  = SELECT, INSERT, UPDATE, DELETE
public.poexport                         = SELECT
public.polloption                       = SELECT, INSERT, UPDATE, DELETE
public.poll                             = SELECT, INSERT, UPDATE
public.productbounty                    = SELECT, INSERT, UPDATE
public.projectbounty                    = SELECT, INSERT, UPDATE
public.requestedcds                     = SELECT, INSERT, UPDATE
public.shipitreport                     = SELECT, INSERT
public.shipment                         = SELECT, INSERT, UPDATE
public.shippingrequest                  = SELECT, INSERT, UPDATE
public.shippingrun                      = SELECT, INSERT, UPDATE
public.shockandawe                      = SELECT, INSERT, UPDATE
public.sourcepackagepublishinghistory   = SELECT
public.specificationbug                 = SELECT, INSERT, DELETE
public.specificationdependency          = SELECT, INSERT, DELETE
public.specificationfeedback            = SELECT, INSERT, UPDATE, DELETE
public.specification                    = SELECT, INSERT, UPDATE
public.specificationsubscription        = SELECT, INSERT, UPDATE, DELETE
public.sprintattendance                 = SELECT, INSERT, UPDATE, DELETE
public.sprint                           = SELECT, INSERT, UPDATE
public.sprintspecification              = SELECT, INSERT, UPDATE, DELETE
public.standardshipitrequest            = SELECT, INSERT, UPDATE, DELETE
public.ticketbug                        = SELECT, INSERT, DELETE
public.ticketmessage                    = SELECT, INSERT
public.ticketreopening                  = SELECT, INSERT, UPDATE
public.ticket                           = SELECT, INSERT, UPDATE
public.ticketsubscription               = SELECT, INSERT, UPDATE, DELETE
public.translationgroup                 = SELECT, INSERT, UPDATE
public.translator                       = SELECT, INSERT, UPDATE, DELETE
public.translationimportqueueentry      = SELECT, INSERT, UPDATE, DELETE
public.validpersonorteamcache           = SELECT
public.votecast                         = SELECT, INSERT
public.vote                             = SELECT, INSERT, UPDATE
public.wikiname                         = SELECT, INSERT, UPDATE, DELETE
public.branch                           = SELECT, INSERT, UPDATE
public.branchsubscription               = SELECT, INSERT, UPDATE, DELETE
public.branchmessage                    = SELECT, INSERT
# FIXME: public.revision should not have UPDATE permission. This is
# being done because the person merging code wants to touch every
# table who has an owner field. The Revision table should not have
# an owner field, though, because it's not meaningful in that
# context. -- Gustavo Niemeyer, 2005-11-02
public.revision                         = SELECT, UPDATE
public.revisionnumber                   = SELECT
public.revisionparent                   = SELECT
public.revisionauthor                   = SELECT
public.personalpackagearchive           = SELECT, UPDATE
public.personalsourcepackagepublication = SELECT

[trebuchet]
# The trebuchet XML-RPC server has restricted read-only access to
# certain tables to improve security.
type=user
public.manifest                         = SELECT
public.manifestentry                    = SELECT
public.manifestancestry                 = SELECT
public.branch                           = SELECT
public.revision                         = SELECT
# To get at a source package's manifest
public.distribution                     = SELECT
public.distrorelease                    = SELECT
public.sourcepackagename                = SELECT
public.sourcepackagepublishing          = SELECT
public.sourcepackagepublishinghistory   = SELECT
public.sourcepackagerelease             = SELECT
public.sourcepackagereleasefile         = SELECT
# To get an upstream product's manifest
public.product                          = SELECT
public.productseries                    = SELECT
public.productrelease                   = SELECT
public.productreleasefile               = SELECT
# To get from source package to upstream
public.packaging                        = SELECT

[statistician]
type=user
public.build                            = SELECT
public.binarypackagename                = SELECT
public.binarypackagepublishing          = SELECT
public.binarypackagerelease             = SELECT
public.distribution                     = SELECT
public.distributionsourcepackagecache   = SELECT, INSERT, UPDATE, DELETE
public.distroarchrelease                = SELECT, UPDATE
public.distrorelease                    = SELECT, UPDATE
public.distroreleaselanguage            = SELECT, INSERT, UPDATE, DELETE
public.distroreleasepackagecache        = SELECT, INSERT, UPDATE, DELETE
public.language                         = SELECT
public.launchpadstatistic               = SELECT, INSERT, UPDATE, DELETE
public.person                           = SELECT
public.validpersonorteamcache           = SELECT
public.posubmission                     = SELECT
public.potemplate                       = SELECT
public.potemplatename                   = SELECT
public.pofile                           = SELECT
public.pomsgset                         = SELECT
public.pomsgid                          = SELECT
public.potmsgset                        = SELECT
public.sourcepackagename                = SELECT
public.sourcepackagepublishing          = SELECT
public.sourcepackagerelease             = SELECT

[librarian]
type=user
public.libraryfilealias                 = SELECT, INSERT
public.libraryfilecontent               = SELECT, INSERT

[librariangc]
type=user
public.libraryfilealias                 = SELECT, UPDATE, DELETE
public.libraryfilecontent               = SELECT, UPDATE, DELETE
# This user needs select on every table that references LibraryFileAlias
public.binarypackagefile                = SELECT
public.bugattachment                    = SELECT
public.build                            = SELECT
public.distroreleasequeue               = SELECT
public.distroreleasequeuecustom         = SELECT
public.distributionmirror               = SELECT
public.message                          = SELECT
public.messagechunk                     = SELECT
public.mirrorproberecord                = SELECT
public.person                           = SELECT
public.pocketchroot                     = SELECT
public.pofile                           = SELECT
public.potemplate                       = SELECT
public.productreleasefile               = SELECT
public.shipitreport                     = SELECT
public.shippingrun                      = SELECT
public.sourcepackagereleasefile         = SELECT
public.translationimportqueueentry      = SELECT
public.distroreleasequeue               = SELECT
public.personalpackagearchive           = SELECT

[dyson]
# Dyson release import script
type=user
public.product                          = SELECT
public.productseries                    = SELECT
public.productrelease                   = SELECT, INSERT, UPDATE
public.productreleasefile               = SELECT, INSERT, UPDATE
# Needed only because SQLobject does things...
public.person                           = SELECT
# Needed to write to the librarian
public.libraryfilealias                 = SELECT, INSERT
public.libraryfilecontent               = SELECT, INSERT

[poimport]
# Rosetta import script
type=user
groups=write
public.translationimportqueueentry      = SELECT, DELETE
public.translationgroup                 = SELECT
public.translator                       = SELECT

[poexport]
# Rosetta export script
type=user
public.distribution                     = SELECT
public.distrorelease                    = SELECT
public.emailaddress                     = SELECT
public.language                         = SELECT
public.libraryfilealias                 = SELECT, INSERT
public.libraryfilecontent               = SELECT, INSERT
public.person                           = SELECT
public.poexport                         = SELECT
public.poexportrequest                  = SELECT, DELETE
public.pofile                           = SELECT, UPDATE
public.pomsgset                         = SELECT
public.pomsgidsighting                  = SELECT
public.potmsgset                        = SELECT
public.poselection                      = SELECT
public.posubmission                     = SELECT
public.potemplate                       = SELECT
public.potemplatename                   = SELECT
public.translationgroup                 = SELECT
public.translator                       = SELECT
public.validpersonorteamcache           = SELECT

[checkwatches]
# Malone bug watch script
type=user
groups=write

[importd]
type=user
groups=write
public.branch                           = SELECT, INSERT, UPDATE
public.revision                         = SELECT, INSERT
public.revisionnumber                   = SELECT, INSERT, DELETE
public.revisionparent                   = SELECT, INSERT
public.revisionauthor                   = SELECT, INSERT

[targetnamecacheupdater]
type=user
public.bugtask                                  = SELECT, UPDATE
public.product                                  = SELECT
public.distribution                             = SELECT
public.distrorelease                            = SELECT
public.sourcepackagename                        = SELECT
public.binarypackagename                        = SELECT

[teammembership]
# Update the TeamMembership table setting expired members
type=user
public.teammembership                           = SELECT, UPDATE
public.teamparticipation                        = SELECT, DELETE
public.person                                   = SELECT

[karma]
# Update the KarmaCache table
type=user
public.karmacache                               = SELECT, INSERT, UPDATE, DELETE
public.karma                                    = SELECT
public.karmacategory                            = SELECT
public.karmaaction                              = SELECT
public.karmatotalcache                          = SELECT, INSERT, UPDATE, DELETE
public.emailaddress                             = SELECT
public.person                                   = SELECT
public.validpersonorteamcache                   = SELECT

[cve]
type=user
public.cve                                      = SELECT, INSERT, UPDATE
public.cvereference                             = SELECT, INSERT, UPDATE, DELETE


[gina]
# Unpack sourcepackages and extract metadata
type=user
groups=write
public.securebinarypackagepublishinghistory     = SELECT, INSERT, UPDATE, DELETE
public.binarypackagepublishing                  = SELECT
public.securesourcepackagepublishinghistory     = SELECT, INSERT, UPDATE, DELETE
public.sourcepackagepublishing                  = SELECT
public.distribution                             = SELECT

[lucille]
type=user
groups=write
public.securebinarypackagepublishinghistory     = SELECT, INSERT, UPDATE, DELETE
public.binarypackagepublishing                  = SELECT
public.securesourcepackagepublishinghistory     = SELECT, INSERT, UPDATE, DELETE
public.sourcepackagepublishing                  = SELECT

# Nicole is not running. Need to set permissions correctly if she
# is resurrected.
#[nicole]
# Pull in product metadata from Freshmeat and other sources
#type=user

[authserver]
# The authentication server.
type=user
groups=write
#public.pushmirroraccess                 = SELECT, INSERT, UPDATE

# Bob the buildd doesn't talk to the database
#[bob]
#type=user

[fiera]
type=user
public.buildqueue                               = SELECT, INSERT, UPDATE, DELETE
public.builder                                  = SELECT, INSERT, UPDATE
public.build                                    = SELECT, INSERT, UPDATE
public.distribution                             = SELECT, UPDATE
public.distrorelease                            = SELECT, UPDATE
public.distroarchrelease                        = SELECT, UPDATE
public.sourcepackagepublishing                  = SELECT
public.sourcepackagepublishinghistory           = SELECT
public.securesourcepackagepublishinghistory     = SELECT
public.sourcepackagerelease                     = SELECT
public.sourcepackagereleasefile                 = SELECT
public.sourcepackagename                        = SELECT
public.binarypackagepublishing                  = SELECT
public.binarypackagepublishinghistory           = SELECT
public.securebinarypackagepublishinghistory     = SELECT
public.binarypackagerelease                     = SELECT
public.binarypackagefile                        = SELECT
public.binarypackagename                        = SELECT
public.libraryfilealias                         = SELECT, INSERT
public.libraryfilecontent                       = SELECT, INSERT
public.processor                                = SELECT
public.processorfamily                          = SELECT
public.pocketchroot                             = SELECT, INSERT, UPDATE
public.component                                = SELECT
public.section                                  = SELECT
public.publishedpackageview                     = SELECT

[sourcerer]
type=user
public.manifest                                 = SELECT, INSERT, UPDATE
public.manifestentry                            = SELECT, INSERT, UPDATE
public.manifestancestry                         = SELECT, INSERT, UPDATE
public.branch                                   = SELECT, INSERT, UPDATE
public.revision                                 = SELECT, INSERT, UPDATE
# To get at a source package's manifest
public.distribution                             = SELECT
public.distrorelease                            = SELECT
public.sourcepackagename                        = SELECT
public.sourcepackagepublishing                  = SELECT
public.sourcepackagepublishinghistory           = SELECT
public.sourcepackagerelease                     = SELECT, UPDATE
public.sourcepackagereleasefile                 = SELECT
# To get at an upstream product's manifest
public.product                                  = SELECT
public.productseries                            = SELECT
public.productrelease                           = SELECT, UPDATE
public.productreleasefile                       = SELECT
# To get from source package to upstream
public.packaging                                = SELECT
# To get stuff from the librarian
public.libraryfilealias                         = SELECT
public.libraryfilecontent                       = SELECT

[write]
type=group
# Full access except for tables that are exclusively updated by
# certain processes, such as the librarian tables. This group is deprecated -
# access should be explicitly granted to users.
public.archconfig                       = SELECT, INSERT, UPDATE
public.archconfigentry                  = SELECT, INSERT, UPDATE
public.binarypackagerelease             = SELECT, INSERT, UPDATE
public.binarypackagefile                = SELECT, INSERT, UPDATE
public.binarypackagefilepublishing      = SELECT, INSERT, UPDATE
public.binarypackagename                = SELECT, INSERT, UPDATE
public.binarypackagepublishingview      = SELECT, INSERT, UPDATE
public.bounty                           = SELECT, INSERT, UPDATE
public.bountymessage                    = SELECT, INSERT
public.branch                           = SELECT, INSERT, UPDATE
public.branchlabel                      = SELECT, INSERT, UPDATE
public.branchrelationship               = SELECT, INSERT, UPDATE
public.bug                              = SELECT, INSERT, UPDATE
public.bugactivity                      = SELECT, INSERT, UPDATE
public.bugattachment                    = SELECT, INSERT, UPDATE
public.bugexternalref                   = SELECT, INSERT, UPDATE
public.buglabel                         = SELECT, INSERT, UPDATE
public.bugmessage                       = SELECT, INSERT, UPDATE
public.bugpackageinfestation            = SELECT, INSERT, UPDATE
public.bugproductinfestation            = SELECT, INSERT, UPDATE
public.bugrelationship                  = SELECT, INSERT, UPDATE
public.bugsubscription                  = SELECT, INSERT, UPDATE, DELETE
public.bugtask                          = SELECT, INSERT, UPDATE
public.bugtracker                       = SELECT, INSERT, UPDATE
public.bugwatch                         = SELECT, INSERT, UPDATE
public.build                            = SELECT, INSERT, UPDATE
public.builder                          = SELECT, INSERT, UPDATE
public.buildqueue                       = SELECT, INSERT, UPDATE, DELETE
public.calendar                         = SELECT, INSERT, UPDATE
public.calendarevent                    = SELECT, INSERT, UPDATE, DELETE
public.calendarsubscription             = SELECT, INSERT, UPDATE, DELETE
public.component                        = SELECT, INSERT, UPDATE
public.componentselection               = SELECT, INSERT, UPDATE
public.country                          = SELECT, INSERT, UPDATE
public.distribution                     = SELECT, INSERT, UPDATE
public.distroarchrelease                = SELECT, INSERT, UPDATE
public.distrorelease                    = SELECT, INSERT, UPDATE
public.distroreleasequeue               = SELECT, INSERT, UPDATE
public.distroreleasequeuebuild          = SELECT, INSERT, UPDATE
public.distroreleasequeuesource         = SELECT, INSERT, UPDATE
public.distroreleasequeuecustom         = SELECT, INSERT, UPDATE
public.distrocomponentuploader          = SELECT, INSERT, UPDATE
public.emailaddress                     = SELECT, INSERT, UPDATE
public.ircid                            = SELECT, INSERT, UPDATE, DELETE
public.jabberid                         = SELECT, INSERT, UPDATE, DELETE
public.karma                            = SELECT, INSERT, UPDATE
public.karmaaction                      = SELECT, INSERT, UPDATE
public.label                            = SELECT, INSERT, UPDATE
public.language                         = SELECT, INSERT, UPDATE
public.launchpaddatabaserevision        = SELECT, INSERT, UPDATE
public.libraryfilealias                 = SELECT, INSERT
public.libraryfilecontent               = SELECT, INSERT
public.license                          = SELECT, INSERT, UPDATE
public.logintoken                       = SELECT, INSERT, UPDATE
public.manifest                         = SELECT, INSERT, UPDATE
public.manifestentry                    = SELECT, INSERT, UPDATE
public.manifestancestry                 = SELECT, INSERT, UPDATE
public.mirror                           = SELECT, INSERT, UPDATE, DELETE
public.mirrorcontent                    = SELECT, INSERT, UPDATE, DELETE
public.mirrorsourcecontent              = SELECT, INSERT, UPDATE, DELETE
public.teammembership                   = SELECT, INSERT, UPDATE, DELETE
public.message                          = SELECT, INSERT, UPDATE
public.milestone                        = SELECT, INSERT, UPDATE
public.binarypackagepublishing          = SELECT
public.binarypackagepublishinghistory   = SELECT
public.securebinarypackagepublishinghistory = SELECT, INSERT, UPDATE, DELETE
public.packageselection                 = SELECT, INSERT, UPDATE
public.packaging                        = SELECT, INSERT, UPDATE
public.person                           = SELECT, INSERT, UPDATE
public.personlabel                      = SELECT, INSERT, UPDATE
public.personlanguage                   = SELECT, INSERT, UPDATE
public.pocketchroot                     = SELECT, INSERT, UPDATE
public.pocomment                        = SELECT, INSERT, UPDATE
public.pofile                           = SELECT, INSERT, UPDATE
public.pomsgid                          = SELECT, INSERT, UPDATE
public.pomsgidsighting                  = SELECT, INSERT, UPDATE
public.pomsgset                         = SELECT, INSERT, UPDATE
public.posubscription                   = SELECT, INSERT, UPDATE
public.potemplate                       = SELECT, INSERT, UPDATE
public.potemplatename                   = SELECT, INSERT, UPDATE
public.potmsgset                        = SELECT, INSERT, UPDATE
public.potranslation                    = SELECT, INSERT, UPDATE
public.poselection                      = SELECT, INSERT, UPDATE
public.posubmission                     = SELECT, INSERT, UPDATE
public.processor                        = SELECT, INSERT, UPDATE
public.processorfamily                  = SELECT, INSERT, UPDATE
public.product                          = SELECT, INSERT, UPDATE
public.productbranchrelationship        = SELECT, INSERT, UPDATE
public.productcvsmodule                 = SELECT, INSERT, UPDATE
public.productlabel                     = SELECT, INSERT, UPDATE
public.productrelease                   = SELECT, INSERT, UPDATE
public.productreleasefile               = SELECT, INSERT, UPDATE
public.productseries                    = SELECT, INSERT, UPDATE
public.productsvnmodule                 = SELECT, INSERT, UPDATE
public.project                          = SELECT, INSERT, UPDATE
public.projectbugtracker                = SELECT, INSERT, UPDATE
public.projectrelationship              = SELECT, INSERT, UPDATE
public.publishedpackageview             = SELECT, INSERT, UPDATE
public.pushmirroraccess                 = SELECT, INSERT, UPDATE
public.schema                           = SELECT, INSERT, UPDATE
public.section                          = SELECT, INSERT, UPDATE
public.sectionselection                 = SELECT, INSERT, UPDATE
public.signedcodeofconduct              = SELECT, INSERT, UPDATE
public.sourcepackagefilepublishing      = SELECT, INSERT, UPDATE
public.sourcepackagename                = SELECT, INSERT, UPDATE
public.sourcepackagepublishing          = SELECT
public.sourcepackagepublishinghistory   = SELECT
public.securesourcepackagepublishinghistory = SELECT, INSERT, UPDATE
public.sourcepackagepublishingview      = SELECT
public.sourcepackagerelease             = SELECT, INSERT, UPDATE
public.sourcepackagereleasefile         = SELECT, INSERT, UPDATE
public.spokenin                         = SELECT, INSERT, UPDATE
public.gpgkey                           = SELECT, INSERT, UPDATE, DELETE
public.sshkey                           = SELECT, INSERT, UPDATE, DELETE
public.teamparticipation                = SELECT, INSERT, UPDATE, DELETE
public.translationeffort                = SELECT, INSERT, UPDATE
public.translationeffortpotemplate      = SELECT, INSERT, UPDATE
public.translationimportqueueentry      = SELECT, INSERT, UPDATE, DELETE
public.wikiname                         = SELECT, INSERT, UPDATE, DELETE

[shipit]
type=user
public.shipment                         = SELECT, INSERT
public.shippingrequest                  = SELECT, UPDATE
public.shippingrun                      = SELECT, INSERT, UPDATE
public.libraryfilealias                 = SELECT, INSERT
public.libraryfilecontent               = SELECT, INSERT
public.emailaddress                     = SELECT
public.person                           = SELECT
public.country                          = SELECT
public.requestedcds                     = SELECT
public.validpersonorteamcache           = SELECT

[tickettracker]
# Sends email reminders to submitters of answered tickets.
type=user
public.distribution                     = SELECT
public.emailaddress                     = SELECT
public.libraryfilealias                 = SELECT, INSERT
public.libraryfilecontent               = SELECT, INSERT
public.message                          = SELECT, INSERT
public.messagechunk                     = SELECT, INSERT
public.person                           = SELECT
public.product                          = SELECT
public.sourcepackagename                = SELECT
public.ticket                           = SELECT
public.ticketbug                        = SELECT
public.ticketmessage                    = SELECT, INSERT
public.ticketreopening                  = SELECT
public.ticketsubscription               = SELECT

[uploader]
type=user

# This block is granted insert in order to be able to create maintainers
# on the fly when we encounter them.
public.person                           = SELECT, INSERT
public.emailaddress                     = SELECT, INSERT
public.teamparticipation                = SELECT, INSERT
public.wikiname                         = SELECT, INSERT

# I didn't want to give it INSERT and if someone can fix the gpg-coc story
# So that it works with my key in place then nascentupload.txt won't have
# to insert it.
public.gpgkey                           = SELECT, INSERT
public.distribution                     = SELECT
public.distrorelease                    = SELECT, UPDATE
public.distroarchrelease                = SELECT
public.sourcepackagepublishing          = SELECT
public.sourcepackagefilepublishing      = SELECT
public.binarypackagepublishing          = SELECT
public.component                        = SELECT, INSERT
public.section                          = SELECT, INSERT
public.componentselection               = SELECT
public.sectionselection                 = SELECT
public.distrocomponentuploader          = SELECT
public.processor                        = SELECT
public.processorfamily                  = SELECT

# Source and Binary packages and builds
public.sourcepackagename                = SELECT, INSERT
public.sourcepackagerelease             = SELECT, INSERT
public.binarypackagename                = SELECT, INSERT
public.binarypackagerelease             = SELECT, INSERT
public.sourcepackagereleasefile         = SELECT, INSERT
public.binarypackagefile                = SELECT, INSERT
public.build                            = SELECT, INSERT

# Thusly the librarian
public.libraryfilecontent               = SELECT, INSERT
public.libraryfilealias                 = SELECT, INSERT

# The queue
public.distroreleasequeue               = SELECT, INSERT, UPDATE
public.distroreleasequeuesource         = SELECT, INSERT
public.distroreleasequeuebuild          = SELECT, INSERT
public.distroreleasequeuecustom         = SELECT, INSERT

# personal package archive
public.personalpackagearchive           = SELECT, INSERT, UPDATE
public.personalsourcepackagepublication = SELECT, INSERT, UPDATE



[queued]
type=user
# Announce handling
public.person                           = SELECT, INSERT
public.emailaddress                     = SELECT, INSERT
public.teamparticipation                = SELECT, INSERT
public.distrocomponentuploader          = SELECT

# The Queue
public.distroreleasequeue               = SELECT, UPDATE
public.distroreleasequeuesource         = SELECT
public.distroreleasequeuebuild          = SELECT
public.distroreleasequeuecustom         = SELECT

# Distribution/Publishing stuff
public.distribution                     = SELECT
public.distrorelease                    = SELECT
public.distroarchrelease                = SELECT
public.distrocomponentuploader          = SELECT
public.build                            = SELECT
public.sourcepackagerelease             = SELECT, UPDATE
public.binarypackagerelease             = SELECT, UPDATE
public.sourcepackagereleasefile         = SELECT
public.binarypackagefile                = SELECT
public.sourcepackagename                = SELECT
public.binarypackagename                = SELECT
public.securesourcepackagepublishinghistory = SELECT, INSERT
public.securebinarypackagepublishinghistory = SELECT, INSERT
public.component                        = SELECT
public.section                          = SELECT
public.componentselection               = SELECT
public.sectionselection                 = SELECT

# Librarian stuff
public.libraryfilealias                 = SELECT, INSERT
public.libraryfilecontent               = SELECT, INSERT

# rosetta auto imports
public.translationimportqueueentry      = SELECT, INSERT, UPDATE

# personal package archive
public.personalpackagearchive           = SELECT, INSERT, UPDATE
public.personalsourcepackagepublication = SELECT, INSERT, UPDATE


[ppad]
type=user
public.personalpackagearchive           = SELECT, INSERT, UPDATE, DELETE
public.personalsourcepackagepublication = SELECT, INSERT, UPDATE, DELETE

[supermirror]
type=user
# For supermirror-rewritemap cronscript
public.person                           = SELECT
public.product                          = SELECT
public.branch                           = SELECT

[session]
# This user doesn't have access to any tables in the main launchpad
# database - it has permissions on the seperate session database only,
# which are not maintained by this script. User is just here so it gets
# created if necessary.
type=user

# This group is now created automatically
# Readonly access to everything
#[read]
#type=group

# This group is now created automatically
# Full access to everything.
# [admin]
# type=group