diff --git a/postgresql/acl.sql b/postgresql/acl.sql
new file mode 100644
index 0000000..c1c4bb2
--- /dev/null
+++ b/postgresql/acl.sql
@@ -0,0 +1,2 @@
+REVOKE connect ON DATABASE example_db FROM PUBLIC;
+GRANT connect ON DATABASE example_db TO example_role;