Add extra_db_users variable to pass through any DB users that need da…

[mattholmes15]

…tabase permissions

Signed-off-by: Matt Holmes matthew.holmes@engineering.digital.dwp.gov.uk

[dan-hill2802]

Rather than a string, would a list of maps be better? e.g. [{ user = "portal", access = "ALL" }]
Would also need to ensure it doesn't allow for SQL injection

[mattholmes15]

Rather than a string, would a list of maps be better? e.g. [{ user = "portal", access = "ALL" }] Would also need to ensure it doesn't allow for SQL injection

Possibly - what varying degrees of access are you expecting though, apart from ALL? Would this then be passed into the psql command? My plan was to pass in the DB Users into the entrypoint file, and then run a for loop for each user to assign the permissions that's originally ran in the EC2 User data - 'access' sounds like we would grant different privileges which would change what psql command is ran

[mattholmes15]

Possibly something a long the lines of GRANT ${access} PRIVILEGES ON TABLES, where ${access} can be ALL, or SELECT, INSERT, etc when taken from the list of maps, although that may be difficult in Bash

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication