Change permissions after the database file is created

roles/copr/mbs/tasks/main.yml

@@ -112,16 +112,15 @@
   get_url: url=https://pagure.io/fm-orchestrator/raw/master/f/conf/cacert.pem dest=/etc/module-build-service/cacert.pem
 
 
-- name: Chown /etc/module-build-service to mbs:mbs
-  file: path=/etc/module-build-service owner=mbs group=mbs recurse=yes
-
-
 - name: Upgrade database
   command: mbs-upgradedb
 
 - name: Generate cert
   command: mbs-gencert
 
+- name: Chown /etc/module-build-service to mbs:mbs
+  file: path=/etc/module-build-service owner=mbs group=mbs recurse=yes
+
 
 # Run module-build-service processes
 - name: Enable fedmsg-relay