resource "postgresql_default_privileges" "workflowdb_reader_public_table_ro" {
  role     = postgresql_role.workflowdb_reader.name
  database = postgresql_database.main.name
  schema   = postgresql_schema.workflowdb_public.name

  owner       = postgresql_role.workflowdb_owner.name
  object_type = "table"
  privileges  = ["SELECT"]
}

resource "postgresql_default_privileges" "workflowdb_reader_public2_table_ro" {
  role     = postgresql_role.workflowdb_reader.name
  database = postgresql_database.main.name
  schema   = postgresql_schema.workflowdb_public2.name

  owner       = postgresql_role.workflowdb_owner.name
  object_type = "table"
  privileges  = ["SELECT"]
}

resource "postgresql_default_privileges" "workflowdb_reader_public_sequence_ro" {
  role     = postgresql_role.workflowdb_reader.name
  database = postgresql_database.main.name
  schema   = postgresql_schema.workflowdb_public.name

  owner       = postgresql_role.workflowdb_owner.name
  object_type = "sequence"
  privileges  = ["SELECT", "USAGE"]
}

resource "postgresql_default_privileges" "workflowdb_reader_public2_sequence_ro" {
  role     = postgresql_role.workflowdb_reader.name
  database = postgresql_database.main.name
  schema   = postgresql_schema.workflowdb_public2.name

  owner       = postgresql_role.workflowdb_owner.name
  object_type = "sequence"
  privileges  = ["SELECT", "USAGE"]
}

resource "postgresql_default_privileges" "workflowdb_user_public_table_ro" {
  role     = postgresql_role.workflowdb_user.name
  database = postgresql_database.main.name
  schema   = postgresql_schema.workflowdb_public.name

  owner       = postgresql_role.workflowdb_owner.name
  object_type = "table"
  privileges  = ["SELECT", "INSERT", "UPDATE", "DELETE"]
}

resource "postgresql_default_privileges" "workflowdb_user_public2_table_ro" {
  role     = postgresql_role.workflowdb_user.name
  database = postgresql_database.main.name
  schema   = postgresql_schema.workflowdb_public2.name

  owner       = postgresql_role.workflowdb_owner.name
  object_type = "table"
  privileges  = ["SELECT", "INSERT", "UPDATE", "DELETE"]
}

resource "postgresql_default_privileges" "workflowdb_user_public_sequence_ro" {
  role     = postgresql_role.workflowdb_user.name
  database = postgresql_database.main.name
  schema   = postgresql_schema.workflowdb_public.name

  owner       = postgresql_role.workflowdb_owner.name
  object_type = "sequence"
  privileges  = ["SELECT", "UPDATE", "USAGE"]
}

resource "postgresql_default_privileges" "workflowdb_user_public2_sequence_ro" {
  role     = postgresql_role.workflowdb_user.name
  database = postgresql_database.main.name
  schema   = postgresql_schema.workflowdb_public.name

  owner       = postgresql_role.workflowdb_owner.name
  object_type = "sequence"
  privileges  = ["SELECT", "UPDATE", "USAGE"]
}

resource "postgresql_default_privileges" "workflowdb_owner_public_table_rw" {
  role     = postgresql_role.workflowdb_owner.name
  database = postgresql_database.main.name
  schema   = postgresql_schema.workflowdb_public.name

  owner       = postgresql_role.workflowdb_owner.name
  object_type = "table"
  privileges  = ["SELECT", "INSERT", "UPDATE", "DELETE", "TRUNCATE", "REFERENCES", "TRIGGER"]
}

resource "postgresql_default_privileges" "workflowdb_owner_public2_table_rw" {
  role     = postgresql_role.workflowdb_owner.name
  database = postgresql_database.main.name
  schema   = postgresql_schema.workflowdb_public2.name

  owner       = postgresql_role.workflowdb_owner.name
  object_type = "table"
  privileges  = ["SELECT", "INSERT", "UPDATE", "DELETE", "TRUNCATE", "REFERENCES", "TRIGGER"]
}

resource "postgresql_default_privileges" "workflowdb_owner_public_sequence_rw" {
  role     = postgresql_role.workflowdb_owner.name
  database = postgresql_database.main.name
  schema   = postgresql_schema.workflowdb_public.name

  owner       = postgresql_role.workflowdb_owner.name
  object_type = "sequence"
  privileges  = ["SELECT", "UPDATE", "USAGE"]
}

resource "postgresql_default_privileges" "workflowdb_owner_public2_sequence_rw" {
  role     = postgresql_role.workflowdb_owner.name
  database = postgresql_database.main.name
  schema   = postgresql_schema.workflowdb_public2.name

  owner       = postgresql_role.workflowdb_owner.name
  object_type = "sequence"
  privileges  = ["SELECT", "UPDATE", "USAGE"]
}