| From: | Stephen Frost <sfrost(at)snowman(dot)net> |
|---|---|
| To: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
| Cc: | Michael Lewis <mlewis(at)entrata(dot)com>, "pgsql-general(at)lists(dot)postgresql(dot)org" <pgsql-general(at)lists(dot)postgresql(dot)org> |
| Subject: | Re: Web users as database users? |
| Date: | 2020-03-11 19:24:14 |
| Message-ID: | 20200311192414.GD13712@tamriel.snowman.net |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-general |
Greetings,
* Tom Lane (tgl(at)sss(dot)pgh(dot)pa(dot)us) wrote:
> I'm not aware that anyone's done formal performance testing,
> but if you want to have a lot of roles in the system, my
> expectation is that you'd be better off granting privileges
> to a small number of group roles and then granting group
> role membership as appropriate.
Right- keep the ACL lists small for individual objects, then grant
membership in the appropriate roles to the actual users who log in and
such. Having lots of roles works out a lot better that way.
Thanks,
Stephen
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Darren Lafreniere | 2020-03-11 20:25:51 | Querying an index's btree version |
| Previous Message | Nicola Contu | 2020-03-11 18:59:20 | Re: Streaming replication - 11.5 |