create user app createdb createrole password 'guest';
grant connect on database postgres to app;

create schema app;
grant usage, create on schema app to app;
alter role app set search_path = app;