iam roles (#116)

internal/db/migrations/postgres/04_iam.down.sql

@@ -6,6 +6,8 @@ drop table iam_scope_project cascade;
 drop table iam_scope_organization cascade;
 drop table iam_scope cascade;
 drop table iam_scope_type_enm cascade;
+drop table iam_role cascade;
+
 
 drop function iam_sub_names cascade;
 drop function iam_immutable_scope_type_func cascade;

internal/db/migrations/postgres/04_iam.up.sql

@@ -169,6 +169,33 @@ before
 insert on iam_user
   for each row execute procedure default_create_time();
 
+create table iam_role (
+    public_id wt_public_id not null primary key,
+    create_time wt_timestamp,
+    update_time wt_timestamp,
+    name text,
+    description text,
+    scope_id wt_public_id not null references iam_scope(public_id) on delete cascade on update cascade,
+    unique(name, scope_id),
+    disabled boolean not null default false
+  );
+
+create trigger 
+  update_time_column 
+before update on iam_role
+  for each row execute procedure update_time_column();
+
+create trigger 
+  immutable_create_time
+before
+update on iam_role
+  for each row execute procedure immutable_create_time_func();
+  
+create trigger 
+  default_create_time_column
+before
+insert on iam_role
+  for each row execute procedure default_create_time();
 
 create table iam_group (
     public_id wt_public_id not null primary key,
@@ -197,4 +224,5 @@ create trigger
 before
 insert on iam_group
   for each row execute procedure default_create_time();
+  
 commit;