Add option for role management per database

[cymed]

General

• Fix a bug
• Add a feature
• Maintenance / sustainability
• Add Documentation

Describe your changes

TODO : Adapt changes definition as it now provides a structure for database, module and role naming and roles management.

In addition to the generic users tww_viewer, tww_user, tww_manager, tww_sysadmin, this PR creates database-specific pendants for cases such as QGEP/QGEP#840

Screenshots

Issue ticket number and link

Checklist before requesting a review

• I have performed a self-review of my code
• If it is a core feature, I have added thorough tests.
• CI Tests are green
• The documentation is up to date with the proposed change.
• My work is ready for review

Checklist before merge

• A review has been performed
• Comments are resolved
• Documentation is ready

[3nids]

I would keep this optional as there are good chances that there is only 1 DB instance.

Also, rather than using EXECUTE, I would opt for parameters called from psql, similarly to what we do with SRID.

[sjib]

I pass this on to @ponceta

[ponceta]

Are there any adaptations required since we will drop and recreate tww_app schema on a regular basis?

[cymed]

Are there any adaptations required since we will drop and recreate tww_app schema on a regular basis?

I will add a script to create_app.py to re-create the grants if the role exists

[cymed]

I now added a Plugin menu item to create database roles. It is only active if the admin mode is enabled and checks for superuser rights before doing anything

Edit: Going via the plugin does not work as we can't find the corresponding pg_service without having the database set up

[sjib]

@ponceta Is this ready for 2024.0 and can be merged?

[ponceta]

This will remove the SQL script with pgAdmin for rights management, I think wait for 2024.1 or 2025.0 is the best way to go. This is strongly linked to TMMT. (Same as #399)