postgres创建只读用户

创建角色（组）

CREATE ROLE readonly;

赋予角色（组）登陆权限

ALTER ROLE readonly WITH LOGIN;

将已有表的select权限赋给角色（组）

GRANT USAGE ON SCHEMA public TO readonly;
GRANT SELECT ON ALL TABLES IN SCHEMA public TO readonly;

将以后所有新建表的select权限赋予给角色

ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT SELECT ON TABLES TO readonly;

创建用户，并继承角色的权限

CREATE USER new_readonly WITH PASSWORD 'secret';
GRANT readonly TO new_readonly;