revoking and destroying roles created by the upgrade

cds-snc · May 29, 2024 · 9ccd2e7 · 9ccd2e7
1 parent 43d07f0
commit 9ccd2e7
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/migrations/versions/0451_create_db_users.py b/migrations/versions/0451_create_db_users.py
@@ -21,6 +21,12 @@ def upgrade():
         op.execute(f"GRANT {super_role} TO {role} WITH ADMIN OPTION;")
 
 
+def downgrade():
+    for role in roles:
+        op.execute(f"REVOKE {super_role} FROM {role};")
+        op.execute(f"DROP ROLE IF EXISTS {role};")
+
+
 def create_role_if_not_exist(role):
     """
     Makes sure the expected user exists in the database before performing the GRANT USER operation.