Add read only user to PG 9 on DB, cookbook snippet.

add_read_only_pg_user.rb

  # Create a user with Login
  sql = [%(CREATE ROLE jsmith WITH PASSWORD 'foobar' LOGIN)]
  # # Allow to connect
  sql << %(GRANT CONNECT ON DATABASE reports TO jsmith)
  # # Allow to use schema
  sql << %(GRANT USAGE ON SCHEMA public TO jsmith)
  # # grant on current objects
  sql << %(GRANT SELECT ON ALL TABLES IN SCHEMA public TO jsmith)
  # # grant on future objects
  sql << %(ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT SELECT ON TABLES TO jsmith)
  
  %x(psql reports postgres -c "#{sql.join(';')}")