@pgpm/encrypted-secrets 0.15.2 → 0.15.3

package/Makefile

@@ -1,5 +1,5 @@
 EXTENSION = pgpm-encrypted-secrets
-DATA = sql/pgpm-encrypted-secrets--0.14.0.sql
+DATA = sql/pgpm-encrypted-secrets--0.15.2.sql
 
 PG_CONFIG = pg_config
 PGXS := $(shell $(PG_CONFIG) --pgxs)

package/README.md

@@ -446,6 +446,22 @@ SELECT encrypted_secrets.secrets_upsert('uuid', 'key', 'value');
 SELECT * FROM secrets_schema.secrets_table WHERE secrets_owned_field = 'uuid';
 ```
 
+### With PGPM roles
+
+Ensure the standard roles exist before granting:
+
+```bash
+pgpm admin-users bootstrap
+```
+
+```sql
+-- Only authenticated users can manage secrets
+GRANT EXECUTE ON FUNCTION encrypted_secrets.secrets_upsert TO authenticated;
+GRANT EXECUTE ON FUNCTION encrypted_secrets.secrets_getter TO authenticated;
+GRANT EXECUTE ON FUNCTION encrypted_secrets.secrets_verify TO authenticated;
+GRANT EXECUTE ON FUNCTION encrypted_secrets.secrets_delete TO authenticated;
+```
+
 ### With @pgpm/jwt-claims
 
 Use JWT claims for owner context:
@@ -468,6 +484,7 @@ SELECT encrypted_secrets.secrets_getter(
 
 ## Dependencies
 
+- PGPM roles (anonymous, authenticated, administrator)
 - `@pgpm/encrypted-secrets-table`: Storage layer
 - `@pgpm/verify`: Verification utilities
 - PostgreSQL pgcrypto extension (for encryption functions)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pgpm/encrypted-secrets",
-  "version": "0.15.2",
+  "version": "0.15.3",
   "description": "Encrypted secrets management for PostgreSQL",
   "author": "Dan Lynch <pyramation@gmail.com>",
   "contributors": [
@@ -21,8 +21,8 @@
     "test:watch": "jest --watch"
   },
   "dependencies": {
-    "@pgpm/encrypted-secrets-table": "0.15.2",
-    "@pgpm/verify": "0.15.2"
+    "@pgpm/encrypted-secrets-table": "0.15.3",
+    "@pgpm/verify": "0.15.3"
   },
   "devDependencies": {
     "pgpm": "^1.0.0"
@@ -35,5 +35,5 @@
   "bugs": {
     "url": "https://github.com/constructive-io/pgpm-modules/issues"
   },
-  "gitHead": "92a241bab64c7b20e85e55a7bd314089907fabba"
+  "gitHead": "187ed37f6b731132fe930acf5b5996b1e63ecca0"
 }

package/pgpm-encrypted-secrets.control

@@ -1,6 +1,6 @@
 # pgpm-encrypted-secrets extension
 comment = 'pgpm-encrypted-secrets extension'
-default_version = '0.14.0'
+default_version = '0.15.2'
 module_pathname = '$libdir/pgpm-encrypted-secrets'
 requires = 'pgcrypto,plpgsql,uuid-ossp,pgpm-encrypted-secrets-table,pgpm-verify'
 relocatable = false