mirror of
https://github.com/osm-search/Nominatim.git
synced 2026-02-14 18:37:58 +00:00
- Remove 'import_polygon_%' from UPDATE_TABLES to keep import_polygon_error and import_polygon_delete tables in frozen databases. - These tables contain permanent import error tracking data and should not be deleted during freeze. The ro-access grant system expects them to exist in all database states.
47 lines
1.6 KiB
SQL
47 lines
1.6 KiB
SQL
-- SPDX-License-Identifier: GPL-2.0-only
|
|
--
|
|
-- This file is part of Nominatim. (https://nominatim.org)
|
|
--
|
|
-- Copyright (C) 2026 by the Nominatim developer community.
|
|
-- For a full list of authors see the git log.
|
|
--
|
|
-- Grant read-only access to the web user for all Nominatim tables.
|
|
|
|
-- Core tables
|
|
GRANT SELECT ON import_status TO "{{config.DATABASE_WEBUSER}}";
|
|
GRANT SELECT ON country_name TO "{{config.DATABASE_WEBUSER}}";
|
|
GRANT SELECT ON nominatim_properties TO "{{config.DATABASE_WEBUSER}}";
|
|
|
|
-- Location tables
|
|
GRANT SELECT ON location_property_tiger TO "{{config.DATABASE_WEBUSER}}";
|
|
GRANT SELECT ON location_property_osmline TO "{{config.DATABASE_WEBUSER}}";
|
|
GRANT SELECT ON location_postcodes TO "{{config.DATABASE_WEBUSER}}";
|
|
|
|
-- Search tables
|
|
{% if not db.reverse_only %}
|
|
GRANT SELECT ON search_name TO "{{config.DATABASE_WEBUSER}}";
|
|
{% endif %}
|
|
|
|
-- Main place tables
|
|
GRANT SELECT ON placex TO "{{config.DATABASE_WEBUSER}}";
|
|
GRANT SELECT ON place_addressline TO "{{config.DATABASE_WEBUSER}}";
|
|
GRANT SELECT ON placex_entrance TO "{{config.DATABASE_WEBUSER}}";
|
|
|
|
-- Error/delete tracking tables
|
|
GRANT SELECT ON import_polygon_error TO "{{config.DATABASE_WEBUSER}}";
|
|
GRANT SELECT ON import_polygon_delete TO "{{config.DATABASE_WEBUSER}}";
|
|
|
|
-- Country grid
|
|
GRANT SELECT ON country_osm_grid TO "{{config.DATABASE_WEBUSER}}";
|
|
|
|
-- Tokenizer tables (word table)
|
|
{% if 'word' in db.tables %}
|
|
GRANT SELECT ON word TO "{{config.DATABASE_WEBUSER}}";
|
|
{% endif %}
|
|
|
|
-- Special phrase tables
|
|
{% for table in db.tables %}
|
|
{% if table.startswith('place_classtype_') %}
|
|
GRANT SELECT ON {{ table }} TO "{{config.DATABASE_WEBUSER}}";
|
|
{% endif %}
|
|
{% endfor %} |