db/migrations/0031_phase2_observability_and_pooling.sql

@@ -207,23 +207,5 @@ CREATE INDEX idx_operation_audit_type ON infrastructure.operation_audit_trail(op
 CREATE INDEX idx_operation_audit_correlation_id ON infrastructure.operation_audit_trail(correlation_id);
 CREATE INDEX idx_operation_audit_occurred_at ON infrastructure.operation_audit_trail(occurred_at);
 
--- Grant permissions
+-- Permissions: schemas owned by executing role; no explicit role-based GRANT in dev/test
-ALTER SCHEMA opendata OWNER TO kartsell;
+-- In production, add explicit role-based GRANT via separate admin script after schema creation
-ALTER SCHEMA kis OWNER TO kartsell;
-ALTER SCHEMA infrastructure OWNER TO kartsell;
-ALTER SCHEMA observability OWNER TO kartsell;
-
-GRANT USAGE ON SCHEMA opendata TO kartsell;
-GRANT USAGE ON SCHEMA kis TO kartsell;
-GRANT USAGE ON SCHEMA infrastructure TO kartsell;
-GRANT USAGE ON SCHEMA observability TO kartsell;
-
-GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA opendata TO kartsell;
-GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA kis TO kartsell;
-GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA infrastructure TO kartsell;
-GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA observability TO kartsell;
-
-GRANT ALL PRIVILEGES ON ALL SEQUENCES IN SCHEMA opendata TO kartsell;
-GRANT ALL PRIVILEGES ON ALL SEQUENCES IN SCHEMA kis TO kartsell;
-GRANT ALL PRIVILEGES ON ALL SEQUENCES IN SCHEMA infrastructure TO kartsell;
-GRANT ALL PRIVILEGES ON ALL SEQUENCES IN SCHEMA observability TO kartsell;

tests/KArtSell.Integration.Tests/appsettings.Development.json

@@ -1,5 +1,5 @@
 {
   "ConnectionStrings": {
-    "Postgres": "Host=127.0.0.1;Port=5432;Database=kartselldb_test;Username=kartsell;Password=kartsell4321@!"
+    "Postgres": "Host=127.0.0.1;Port=5432;Database=kartselldb_test;Username=kartsell_test;Password=kartsell4321@!_test"
   }
 }