createReadOnlyUser.sql

-- Create a group to grant select permission
CREATE ROLE readaccess;

-- Grant access to existing tables
GRANT USAGE ON SCHEMA public TO readaccess;
GRANT SELECT ON ALL TABLES IN SCHEMA public TO readaccess;

-- Grant access to future tables
ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT SELECT ON TABLES TO readaccess;

-- Create a new user with password and add this to readaccess group
CREATE USER myuser WITH PASSWORD 'secret';
GRANT readaccess TO myuser;