Access control on the read replica

From: Мазлов Владимир <vlmazlov(at)yandex(dot)ru>
To: "pgsql-general(at)postgresql(dot)org" <pgsql-general(at)postgresql(dot)org>
Subject: Access control on the read replica
Date: 2020-04-21 12:47:46
Message-ID: 246721587473077@mail.yandex.ru
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

<div><div><div><div><div><div><div><div><div>Hi,</div><div> </div><div>What I've been trying to do: write a web app that, upon receiving a request, automatically gets a DB connection with only the permissions it needs. In order to do that I'd like to create a mechanism for dynamically granting a role a set of permissions necessary for the given request and then revoking them (alternatively, we could pre-create a number of roles for each set of permissions but I'd like to avoid that solution, as it's very incovenient).</div><div> </div><div>There are a number of solutions to this problem: you could use triggers/views, you could use security definer functions to grant/revoke permissions for a pool of roles. None of the solutions I've been able to come up with work on connections to the standby.</div><div> </div><div>Does anything I've stated above strike you as obviously wrong? If not, do you perhaps have any ideas on how this problem could be tackled?</div><div> </div><div>I would very much appreciate any ideas.</div><div> </div><div>Cheers,</div><div>Vladimir</div></div></div></div></div></div></div></div></div>

Attachment Content-Type Size
unknown_filename text/html 1.1 KB

Browse pgsql-general by date

  From Date Subject
Next Message Malik Rumi 2020-04-21 17:24:10 Triggers and Full Text Search *
Previous Message Мазлов Владимир 2020-04-21 12:43:25 Access control on the read replica