break: new system for user and privileges

tasks/main.yml

@@ -56,15 +56,29 @@
 
 - name: manage users
   community.general.postgresql_user:
-    name: '{{ item.name }}'
-    password: '{{ item.password }}'
-    db: '{{ item.database }}'
-    priv: '{{ item.privileges|join("/") }}'
-    role_attr_flags: '{{ item.attributes|default([])|join(",") }}'
-    state: '{{ item.state|default("present") }}'
-  loop: '{{ postgresql_users }}'
+    name: '{{ item.key }}'
+    password: '{{ item.value.password }}'
+    role_attr_flags: '{{ item.value.attributes|default([])|join(",") }}'
+    state: '{{ item.value.state|default("present") }}'
+  loop: '{{ postgresql_users|dict2items }}'
   loop_control:
-    label: '{{ item.name }}/{{ item.database }}'
+    label: '{{ item.key }}'
+  become: true
+  become_user: postgres
+  when: postgresql_primary
+  tags: postgresql
+
+- name: manage user's privileges
+  community.postgresql.postgresql_privs:
+    db: '{{ item.database }}'
+    roles: '{{ item.role }}'
+    type: '{{ item.type|default("table") }}'
+    objs: '{{ item.objets|default(["ALL_IN_SCHEMA"])|join(",") }}'
+    privs: '{{ item.privileges|join(",") }}'
+    state: '{{ item.state|default("present") }}'
+  loop: '{{ postgresql_privileges }}'
+  loop_control:
+    label: '{{ item.role }}/{{ item.database }}'
   become: true
   become_user: postgres
   when: postgresql_primary