-- Bell runtime may only append and read rule/Alert history.

REVOKE ALL ON TABLE bell.rule_versions, bell.event_rule_sweeps,
    bell.rule_evaluations, bell.alerts, bell.alert_events,
    bell.alert_transitions, bell.alert_command_receipts FROM PUBLIC;
REVOKE ALL ON TABLE bell.rule_versions, bell.event_rule_sweeps,
    bell.rule_evaluations, bell.alerts, bell.alert_events,
    bell.alert_transitions, bell.alert_command_receipts FROM bell_runtime;

GRANT SELECT, INSERT ON TABLE bell.rule_versions, bell.event_rule_sweeps,
    bell.rule_evaluations, bell.alerts, bell.alert_events,
    bell.alert_transitions, bell.alert_command_receipts TO bell_runtime;

REVOKE ALL ON TABLE bell.rule_versions, bell.event_rule_sweeps,
    bell.rule_evaluations, bell.alerts, bell.alert_events,
    bell.alert_transitions, bell.alert_command_receipts FROM sense_app;