# Workflow to grant read (SELECT) privilege to all users in NSAPH admin role


 [Source code](grantcwl_src.md) 


![](grant.png)

```{contents}
---
local:
---
```

**Workflow**

## Description

This workflow executes an SQL statement in the database to grant
read priviligies to NSAPH users (memebrs of group nsaph_admin)
This is a wrapper around the tool to be called from Airflow DAG.


## Inputs

| Name            | Type     | Default                                        | Description                                            | 
|:----------------|:---------|:-----------------------------------------------|:-------------------------------------------------------|
| database        | File     |                                                | Path to database connection file, usually database.ini | 
| connection_name | string   |                                                | The name of the section in the database.ini file       | 
| sql             | string[] | `["call public.grant_select('nsaph_admin');"]` |                                                        | 

## Outputs

| Name      | Type | Description | 
|:----------|:-----|:------------|
| grant_log | File |             | 
| grant_err | File |             | 

## Steps

| Name  | Runs                                    | Description                                                                           | 
|:------|:----------------------------------------|:--------------------------------------------------------------------------------------|
| grant | [alter_database.cwl](alter_database.md) | Grants read access to the members of NSAPH group for newly created or updated tables  |