-- this should only be needed per postgresql instance

-- can modify the database schema
DROP ROLE IF EXISTS ddl;
CREATE ROLE ddl WITH NOLOGIN;

-- can modify database data
DROP ROLE IF EXISTS dml;
CREATE ROLE dml WITH NOLOGIN;

-- can only read database data
DROP ROLE IF EXISTS read_only;
CREATE ROLE read_only WITH NOLOGIN;