daattali#112 update database documentation, add roles description

docs/role_dependency.xml

@@ -0,0 +1,2 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<mxfile userAgent="Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" version="9.2.7" editor="www.draw.io" type="google"><diagram id="1e81eeb5-e9c2-78e5-3863-4371446fb9cc" name="Page-1">3VhLb+MgEP41PqayjWmSYx7d7mF3VW0rbXuqiE1stNhYGDdJf/1CDH7htFXlJtLmEhhmBuabD2ZkB6zS/S1HefKTRZg6vhvtHbB2fN8L/Gv5pySHSgIhqAQxJ5FWagT35BVroaulJYlw0VEUjFFB8q4wZFmGQ9GRIc7Zrqu2ZbS7a45ibAnuQ0Rt6R8SiaSSzqDbyL9jEidmZ8/VKxsU/o05KzO9n+OD7fFXLafI+NL6RYIitmuJwI0DVpwxUY3S/QpTha2BrbL7dmK1PjfHmfiQwXwz9YMtCsL5bDuLwok3r1y8IFpiE8PxpOJg0FEB5loNc4H3QzlBG6Pu2ofy6lAlhTBLseAHqaIdBcbkYFih57smF36gZUk3D5oDOv9x7bvBQA40DB+FxB+A5JrKPZcReZHDWA3LAvPnIzLPDmzPMpRiB66fUZSSzBjKQ7RsLYSPDMLqQK5c3iVE4PschWp1J2+clCUilQGsvdp6IBMdxIcTbeegjTGYX83bv+m5IDfvxyVZCIMeC+cDLPTOxkJ/enlIvN7F9Icgcc8HyewskAxn4iRIkx5IkwuDZL9ex8fJPFLSEK4v8QBV2Xv7ATojTOB9LslinathmdJFKBiXoaugiewbfqANpnesIIKwTKpsmBAslQpULSzrrmDFqLJbN31B42NBSaxsBevhy0pBSYZXdbPjjg66cTHtV94B6topCb4kI8EYZfdyBfdNoAMAuy/pDF60uHyg68NZtFCttZyFFBUFCbuoyMj54VEheAXN9KmDGI6srruHl9yQlTzE71BCIB7jk42N/+67AgeANTKOKRLkpXvQIbD1DneMyBCarsE7kVjjogpQW7U7876j654j0HNUgWA5Oua+DvtzdABDHe9IdFD3C++JeGyNn2q1kYhiWvY3ieJfliiw30t9lih9R37vhThBFJk9dGip5UqhOH3guhib2gBhj3eVx/FYaJfk29+LXw8WFeUzLLrk47ggr7qrUyTTsUltuFRFASxRKWS1Pn53UAZI116Kt+JkSS5kRSBZ/KAm60kwTiWoe2gDK7Br7hAN+1kepQ4Au+b+h5BbNwbYxXckyOW0+ZhTXYrmixm4+Qc=</diagram></mxfile>

index.html

@@ -79,12 +79,49 @@ <h1>Measuring Data Quality</h1>
 </p>
 
 <hr>
-
-<h1>Data Model</h1>
+<h1>Database</h1>
+<h2>Data Model</h2>
 <p style="text-align:center;">
   <img src="{{ site.baseurl }}/img/data_model.png" alt="Data Model" align="middle"/>
 <p>
-
+<h2>Roles and Permissions</h2>
+<p>We use the internal roles and row security policy concept of Postgres.</p>
+<p>There are three main roles defined for users:</p>
+<table>
+  <tr>
+    <th>Role</th>
+    <th>Description</th>
+    <th>Naming</th>
+  </tr>
+  <tr>
+    <td>Superadmin</td>
+    <td>
+      All rights on all tables</br>
+      Rights granted on all user groups
+    </td>
+    <td>super_admin</td>
+  </tr>
+  <tr>
+    <td>User</td>
+    <td>
+      Full rights on indicator, indicator_group and parameter</br>
+      Select rights on data_source, data_source_type, parameter_type, indicator_type, batch, session, session_result</br>
+      Rights granted on specific user groups
+    </td>
+    <td>"user_group_" + user_group_name</td>
+  </tr>
+  <tr>
+    <td>Admin</td>
+    <td>
+      Same as User, but additional update right on data_source</br>
+      Rights granted on specific user groups
+    </td>
+    <td>"user_group_" + user_group_name + "_admin"</td>
+  </tr>
+</table>
+<p style="text-align:center;">
+  <img src="{{ site.baseurl }}/img/role_dependency.png" alt="Role Dependency" align="middle"/>
+<p>
 <hr>
 
 <h1>Architecture Diagram</h1>