1、创建只读角色
CREATE ROLE readaccess;
2、授予对现有表的访问权限
GRANT USAGE ON SCHEMA public TO readaccess;
GRANT SELECT ON ALL TABLES IN SCHEMA public TO readaccess;
3、授予后面新增表的访问权限
ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT SELECT ON TABLES TO readaccess;
4、创建用户
CREATE USER tomek WITH PASSWORD 'mypassword';
GRANT readaccess TO testuser;