Da Emigar.
Super User
create role pgadmin with encrypted password 'XXXYYYYZZZZZ';
alter role pgadmin with login;
grant all privileges on database postgres to pgadmin;
alter role pgadmin with createdb;
alter role pgadmin with createrole;
alter role pgadmin with superuser;
utenti sola lettura
create role ciccio_pasticcio with login encrypted password 'XXXYYYYZZZZZ';
create group pasticcio_ro;
alter group pasticcio_ro add user ciccio_pasticcio;
grant connect on database pasticci_db to pasticcio_ro;
grant usage on schema pasticci_schema to pasticcio_ro;
grant select on all tables in schema pasticci_schema to pasticcio_ro;
alter default privileges in schema pasticci_schema grant select on tables to group pasticcio_ro;
utenti proprietari
create role pasticcio_app with login encrypted password 'XXXYYYYZZZZZ';
grant all privileges on database pasticci_db to pasticcio_app;
alter user pasticcio_app set search_path='pasticci_schema';