Create a new hivemind_user database user to be used when serving

API calls through PostgREST

haf @ a2479052

-Subproject commit fd69207e2026ecdf046a74deacb54950b186d773
+Subproject commit a247905233f6d38e34b6d535798e02fafa643664

scripts/ci/start_postgrest.sh

@@ -5,7 +5,7 @@ set -o pipefail
 
 POSTGRES_HOST="localhost"
 POSTGRES_PORT=5432
-POSTGRES_USER="hivemind"
+POSTGRES_USER="hivemind_user"
 WEBSERVER_PORT=8080
 ADMIN_PORT=3001
 LOG_LEVEL="error"
@@ -32,7 +32,7 @@ while [ $# -gt 0 ]; do
         ;;
     --log-level=*)
         LOG_LEVEL="${1#*=}"
-        ;;  
+        ;;
     -*)
         echo "ERROR: '$1' is not a valid option"
         echo
@@ -49,7 +49,7 @@ done
 
 POSTGRES_ACCESS=${POSTGRES_URL:-"postgresql://$POSTGRES_USER@$POSTGRES_HOST:$POSTGRES_PORT/haf_block_log"}
 
-start_webserver() { 
+start_webserver() {
     export PGRST_DB_URI=$POSTGRES_ACCESS
     export PGRST_SERVER_PORT=$WEBSERVER_PORT
     export PGRST_ADMIN_SERVER_PORT=$ADMIN_PORT

scripts/setup_postgres.sh

@@ -31,6 +31,7 @@ supplement_builtin_roles() {
   local pg_access="$1"
   echo "Attempting to supplement definition of hivemind builtin roles..."
   psql $pg_access -v ON_ERROR_STOP=on -c 'GRANT hivemind TO haf_admin;'
+  psql $pg_access -v ON_ERROR_STOP=on -c 'GRANT hivemind_user TO hivemind;'
 }
 
 POSTGRES_HOST="/var/run/postgresql"
@@ -75,6 +76,7 @@ else
 fi
 
 "$SCRIPTPATH/../haf/scripts/create_haf_app_role.sh" --postgres-url="$POSTGRES_ACCESS" --haf-app-account="hivemind"
+"$SCRIPTPATH/../haf/scripts/create_haf_app_role.sh" --postgres-url="$POSTGRES_ACCESS" --haf-app-account="hivemind_user" --base-group="hive_applications_group" --public
 
 #psql "$POSTGRES_ACCESS" -c "GRANT SET ON PARAMETER log_min_messages TO hivemind;"