tasks/postgres/easy/lego/basic_security_setup/description.md

Set up basic database security with role-based access control and Row-Level Security (RLS) for the LEGO database.

Your Tasks:

1. Create Database Role and Permissions

Create a new database role called theme_analyst with the following permissions:

• SELECT permissions on all reference tables: lego_themes, lego_colors, lego_parts, lego_part_categories
• SELECT permissions on main data tables: lego_sets, lego_inventories, lego_inventory_parts
• No INSERT, UPDATE, or DELETE permissions on any tables

2. Enable Row-Level Security

Enable RLS on the following tables:

• lego_sets
• lego_inventories
• lego_inventory_parts

Requirements:

• Use CREATE ROLE to create the theme_analyst role
• Use GRANT SELECT statements to assign the appropriate permissions
• Use ALTER TABLE ... ENABLE ROW LEVEL SECURITY to enable RLS on each table

Expected Outcome:

After completing these tasks:

• The theme_analyst role should exist with read-only access to specified tables
• Row-Level Security should be enabled (but not yet enforced with policies) on the three main data tables
• The role should have no write permissions on any table

This sets up the foundation for implementing theme-based data isolation policies.