Re: Web users as database users?

From: Rob Sargent <robjsargent(at)gmail(dot)com>
To: Tim Clarke <tim(dot)clarke(at)minerva(dot)info>
Cc: "pgsql-general(at)lists(dot)postgresql(dot)org" <pgsql-general(at)lists(dot)postgresql(dot)org>
Subject: Re: Web users as database users?
Date: 2019-09-20 13:01:06
Message-ID: 28CB89D3-194A-420F-868A-0AFC169EF7E5@gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

> On Sep 20, 2019, at 6:15 AM, Tim Clarke <tim(dot)clarke(at)minerva(dot)info> wrote:
>
>> On 20/09/2019 12:50, David Gallagher wrote:
>> Hi - I’m working on a database that will be accessed via a web app.
>> I’m used to a setup where there is one account/role that the app would
>> use to access the database, but in my current scenario I’m interested
>> in row level security and auditing enforced by the database. In this
>> scenario, would it make sense to have a user account on the database
>> to mirror the user account from the web app? Is that an unusual practice?
>
>
> Not at all, we're doing it
>
>
> Tim Clarke
>
But you likely want a many-to-one mapping of actual user to permission group

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Tom Lane 2019-09-20 14:18:52 Re: Web users as database users?
Previous Message Morris de Oryx 2019-09-20 12:46:21 Re: FW: Re: FW: Re: Shouldn;t this trigger be called?