Add read only user to PG 9 on DB, cookbook snippet.

add_read_only_pg_user.rb

# Create a user with Login
sql = [%(CREATE ROLE <username> WITH PASSWORD '<password>' LOGIN)]
# # Allow to connect
sql << %(GRANT CONNECT ON DATABASE reports TO <username>)
# # Allow to use schema
sql << %(GRANT USAGE ON SCHEMA public TO <username>)
# # grant on current objects
sql << %(GRANT SELECT ON ALL TABLES IN SCHEMA public TO <username>)
# # grant on future objects
sql << %(ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT SELECT ON TABLES TO <username>)
  
%x(psql reports postgres -c "#{sql.join(';')}")