chore: grant auth roles to supabase_storage_admin user (#590)

* chore: grant auth roles to supabase_storage_admin user

supabase_storage_admin needs to be able to switch to these roles without relying postgrest

* add tests for supabase_storage_admin membership

---------

Co-authored-by: Bobbie Soedirgo <[email protected]>

Author: inian

migrations/db/migrations/20230327032006_grant_auth_roles_to_supabase_storage_admin.sql

@@ -0,0 +1,4 @@
+-- migrate:up
+grant anon, authenticated, service_role to supabase_storage_admin;
+
+-- migrate:down

migrations/tests/storage/privs.sql

@@ -0,0 +1,3 @@
+select is_member_of('anon', 'supabase_storage_admin');
+select is_member_of('authenticated', 'supabase_storage_admin');
+select is_member_of('service_role', 'supabase_storage_admin');

migrations/tests/storage/test.sql

@@ -1,2 +1,3 @@
 
 \ir exists.sql
+\ir privs.sql

migrations/tests/test.sql

@@ -5,7 +5,7 @@ BEGIN;
 
 CREATE EXTENSION IF NOT EXISTS pgtap;
 
-SELECT plan(33);
+SELECT plan(36);
 
 \ir fixtures.sql
 \ir database/test.sql