locals {
  streamlit_privileges = toset(["USAGE"])
}

module "role" {
  source           = "../../../internal/object_type_access_database_role"
  database_name    = var.database
  role_name_suffix = "${var.schema}_SCHEMA_STREAMLITS_${var.enable_write_privileges ? "READWRITE" : "READ"}"

  schema_additional_permissions = var.enable_write_privileges ? ["CREATE STREAMLIT"] : []

  schema_object_types_and_privileges = [
    {
      schema     = var.schema,
      type       = "streamlits",
      privileges = local.streamlit_privileges
    },
  ]
}