Hello,
Usually I would 
create user uuu password 'ppp';
GRANT usage on schema zzz to uuu;
GRANT select on all tables in schema zzz to uuu;
But just this morning someone used 
create user uuu password 'ppp';
alter user uuu set default_transaction_read_only = on;
GRANT select on all tables in schema zzz to uuu;
So I only added the grant usage and it worked fine. 
What do people use day to day?
I had frankly never explored the default_transaction_read_only
parameter ...
-- 
regards
Matthias Ritzkowski
-marlinmobile-