create table if not exists permissions
(
    user       TEXT not null references users (id),
    role       TEXT not null references roles (name),
    created_at TEXT not null default CURRENT_TIMESTAMP
);

-- unique user & role
create unique index if not exists permissions_unique_user_role on permissions (user, role);