lib: Add update permissions to 'nobody' postgres user

This user needs the ability to change some attributes of 'Patch' and
'CoverLetter' instances that are stored in the 'patchwork_submission'
table, since both are are concrete subclasses of 'Submission'.

Stable-only since the 'Submission model has been removed on 'master'.

Signed-off-by: Stephen Finucane <stephen@that.guru>
Suggested-by: Ali Alnubani <alialnu@mellanox.com>
Closes: #364
Stable-Only

diff --git a/lib/sql/grant-all.postgres.sql b/lib/sql/grant-all.postgres.sql
index 56a24864db96350a5174fb2d4a466bc45b475242..48acf1b0b0677604e2f20a574ae8ffa45f8f2d1a 100644 (file)
--- a/lib/sql/grant-all.postgres.sql
+++ b/lib/sql/grant-all.postgres.sql
@@ -73,6 +73,8 @@ GRANT INSERT, SELECT ON
        patchwork_coverletter,
        patchwork_event,
        patchwork_seriesreference,
+TO "nobody";
+GRANT INSERT, SELECT, UPDATE ON
        patchwork_submission
 TO "nobody";
 GRANT INSERT, SELECT, UPDATE, DELETE ON