Merge pull request #1 from DricomDragon/python-db-user

Python db user

README.md

@@ -39,27 +39,56 @@ Start service :
 
 `sudo service postgresql start`
 
-#### Create the database
+#### Create SQL objects
 
-Connect with postgres profile :
+##### Create python user
 
-`sudo su postgres`
+Create owner of the _logistics_ database.
+
+`sudo -u postgres psql -f SQL/create_user.sql`
+
+##### Create the database
 
 Create the database :
 
-`psql -f SQL/create_db.sql postgres`
+`sudo -u postgres psql -f SQL/create_db.sql`
+
+##### Create tables
 
 Populate database with tables :
 
-`psql -d logistics -f SQL/create_tables.sql postgres`
+`sudo -u postgres psql -d logistics -f SQL/create_tables.sql`
+
+Grant python to alter these tables :
+
+`sudo -u postgres psql -d logistics -f SQL/grant_python.sql`
+
+##### Add starter testing data
 
 Populate tables with sample data :
 
-`psql -d logistics -f SQL/populate_tables.sql postgres`
+`sudo -u postgres psql -d logistics -f SQL/populate_tables.sql`
+
+#### Security
+
+If needed you can adapt the password of *python_app* user (or any user you want) :
+
+`sudo -u postgres psql -c "ALTER USER python_app PASSWORD 'blablapoivron'"`
+
+Do not forget to adapt the password in the `consumer/credentials.py` file.
+
+#### Shortcut
+
+To do everything in two single command :
+`sudo -u postgres psql -f SQL/create_user.sql -f SQL/create_db.sql`
+
+`sudo -u postgres psql -d logistics -f SQL/create_tables.sql -f SQL/grant_python.sql -f SQL/populate_tables.sql`
+
+#### Clear everything
 
-If needed you can adapt the password of postgres user (or any user you want) :
+Remove database and *python_app* db user :
 
-`psql -c "alter user postgres password 'postgres_password'"`
+`sudo -u postgres psql -f SQL/clear_all.sql`
 
 ## Repository structure
 

SQL/clear_all.sql

@@ -0,0 +1,3 @@
+DROP DATABASE logistics ;
+
+DROP ROLE python_app ;

SQL/create_db.sql

@@ -1 +1 @@
-CREATE DATABASE logistics;
+CREATE DATABASE logistics OWNER python_app ;

SQL/create_user.sql

@@ -0,0 +1,4 @@
+CREATE 
+    USER python_app 
+    WITH NOCREATEDB NOCREATEROLE NOSUPERUSER 
+        PASSWORD 'blablapoivron';

SQL/grant_python.sql

@@ -0,0 +1,3 @@
+GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA public TO python_app;
+
+GRANT ALL PRIVILEGES ON ALL SEQUENCES IN SCHEMA public TO python_app;

consumer/credentials.py

@@ -1,3 +1,3 @@
 def getCredentials():
     """ Return credentials for the database """
-    return "host=localhost dbname=logistics user=postgres password=postgres_password"
+    return "host=localhost dbname=logistics user=python_app password=blablapoivron"