locals {
  model_privileges = toset(["USAGE"])
}

module "role" {
  source           = "../../../internal/object_type_access_database_role"
  database_name    = var.database
  role_name_suffix = "${var.schema}_SCHEMA_MODELS_${var.enable_write_privileges ? "READWRITE" : "READ"}"

  schema_additional_permissions = var.enable_write_privileges ? ["CREATE MODEL"] : []

  schema_object_types_and_privileges = [
    {
      schema     = var.schema,
      type       = "models",
      privileges = local.model_privileges
    },
  ]
}