CREATE USER readonly WITH ENCRYPTED PASSWORD 'readonly';
alter user readonly set default_transaction_read_only=on;
GRANT CONNECT ON DATABASE dbname to readonly;
GRANT USAGE ON SCHEMA dbname to readonly;
ALTER DEFAULT PRIVILEGES IN SCHEMA dbname GRANT SELECT ON TABLES TO readonly;
GRANT SELECT ON ALL SEQUENCES IN SCHEMA dbname TO readonly;
GRANT SELECT ON ALL TABLES IN SCHEMA dbname TO readonly;
-- CREATE USER username WITH PASSWORD 'password';
-- grant all privileges on database dbname to username;
-- ALTER USER username WITH SUPERUSER;