Document minimal privileges required to run against Neo4j

[fbiville]

Indices and constraints (internal)

• node uniqueness constraint on __LiquibaseLock(:lockedBy)
• node uniqueness constraint on __LiquibaseTag(:tag)
• node uniqueness constraint on __LiquibaseContext(:context)
• node uniqueness constraint on __LiquibaseLabel(:label)
• [Enterprise Edition only] node key constraint on __LiquibaseChangeSet(:id, :author, :changeLog)

CRUD access (internal)

• on node __LiquibaseLock {id: STRING, grantDate: DATETIME, lockedBy: STRING}
• on nodes __LiquibaseTag {tag: STRING, dateCreated: DATETIME, dateUpdated: DATETIME}
• on nodes __LiquibaseContext {context: STRING, dateCreated: DATETIME, dateUpdated: DATETIME}
• on nodes __LiquibaseLabel {label: STRING, dateCreated: DATETIME, dateUpdated: DATETIME}
• on nodes __LiquibaseChangeSet {changeLog: STRING, id: STRING, author: STRING, checkSum: STRING, execType: STRING, description: STRING, comments: STRING, deploymentId: STRING, storedChangeLog: STRING, liquibaseVersion: STRING}
• on node __LiquibaseChangeLog {dateCreated: DATETIME, dateUpdated: DATETIME}
• on relationships (:__LiquibaseChangeLog)<-[:IN_CHANGELOG {dateExecuted: DATETIME, orderExecuted: INTEGER}]-(:__LiquibaseChangeSet)
• on relationships (:__LiquibaseTag)-[:TAGS]->(:__LiquibaseChangeSet)
• on relationships (:__LiquibaseContext)-[:CONTEXTUALIZES]->(:__LiquibaseChangeSet)
• on relationships (:__LiquibaseLabel)-[:LABELS]->(:__LiquibaseChangeSet)

[fbiville]

Easier way is probably to run updateSQL and let people deduce what permissions are needed.