add liquibase parameter

Author: davidgamez

docker-compose.yaml

@@ -102,8 +102,8 @@ services:
       - --password=${POSTGRES_PASSWORD}
       - --log-level=1
       - --classpath=postgresql-42.7.8.jar
-      - -Dusers_app_role=${POSTGRES_USER}
       - update
+      - -Dusers_app_role=${POSTGRES_USER}
     depends_on:
       postgres:
         condition: service_healthy
@@ -122,8 +122,8 @@ services:
       - --password=${POSTGRES_PASSWORD}
       - --log-level=1
       - --classpath=postgresql-42.7.8.jar
-      - -Dusers_app_role=${POSTGRES_USER}
       - update
+      - -Dusers_app_role=${POSTGRES_USER}
     depends_on:
       postgres-test:
         condition: service_healthy

liquibase/changes_user/feat_1694_grants.sql

@@ -1,6 +1,8 @@
+--liquibase formatted sql
+--changeset liquibase:feat-1694-grants-app-role
 -- Grant the application role access to all existing tables in the users DB
 -- and configure default privileges so any future tables are automatically accessible.
--- The role name is injected at migration time via the Liquibase property ${users_app_role}.
+-- The role name is injected at migration time via the Liquibase -D property flag.
 -- Locally: users_app_role=postgres (same as the Liquibase user — grant is a no-op).
 -- Production: users_app_role is sourced from the environment secret.