Who it is forA database administrator who already operates a PostgreSQL 17 database and must let analysts query business tables without moving data.
The problemCopying business tables into a new store creates duplicate data and new permission risks.
The outcomeA registered table that the workspace reads in place, with PostgreSQL grants and row-security policies deciding what each query can see.
What you need first
- Python 3.11+ and Docker with Compose v2
- A TypeSafe key or other JEV provider settings
- A CSV export or an existing PostgreSQL table to query
Steps
- Run
git clone --branch v0.7.0 https://github.com/Sheltercosmo/jev4pg.gitand thencd jev4pg, thenpython deploy/configure.py. - Copy
deploy/external.env.exampletodeployment.envand set your host, port, database and login names. Back up the target database before migration. - Run
docker compose --env-file deployment.env -f compose.external.yaml build app, thendocker compose --env-file deployment.env -f compose.external.yaml run --rm migrate migrate --check, thendocker compose --env-file deployment.env -f compose.external.yaml run --rm migrate. - As the table owner or an administrator, grant
GRANT USAGE ON SCHEMA business TO semantic_runtime;andGRANT SELECT ON business.tickets TO semantic_runtime;. - Run
docker compose --env-file deployment.env -f compose.external.yaml exec app jev4pg attach tickets --tenant demo --schema business --table tickets, then rundocker compose --env-file deployment.env -f compose.external.yaml --profile queries up -d --wait.
Prompt for your agent
Use the jev4pg repository to attach the existing table <schema>.<table> to the workspace for tenant demo without copying rows, using the external PostgreSQL setup. Report the grants that were applied and confirm that a test SELECT through the workspace returns only rows visible to the runtime login.
Caveat. The README says to back up the target database before migration and that generated passwords do not change existing logins, so review each grant before running it.
Get 5 new use cases every morning. Free, one short email, unsubscribe anytime.
Get them freeShare: X LinkedIn Hacker News Email Copy link
Disclaimer
Deduped lists open-source repositories that belong to other people. We do not own, maintain, audit, or vouch for any of them, and a repo appearing here is not an endorsement or a safety check. The use cases, steps, and prompts are written by AI and may be incomplete, outdated, or just wrong. Where a use case is marked "Seen in the wild", we link to public posts where someone described something similar, but we have not verified those posts and the use case itself is still our AI's own write-up. Use all of this at your own risk. Only run code, commands, or agents on systems and accounts you are authorized to use, and read the code and every command before you run it, especially anything that touches credentials, files, or the network. Nothing here is professional, security, legal, or financial advice. All trademarks and project names belong to their respective owners, and their use here does not imply affiliation. Content is provided as is, without warranties of any kind. Found a mistake, a safety problem, or something you want removed? Email [email protected] and we will look at it promptly. Full disclaimer page