From: | Craig Ringer <ringerc(at)ringerc(dot)id(dot)au> |
---|---|
To: | Andreas <maps(dot)on(at)gmx(dot)net> |
Cc: | pgsql-general(at)postgresql(dot)org |
Subject: | Re: Philosophical question |
Date: | 2011-12-14 13:28:58 |
Message-ID: | 4EE8A49A.1070406@ringerc.id.au |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general |
On 14/12/2011 8:32 PM, Andreas wrote:
> Hi,
>
> I asked elsewhere about the best way to store db credentials within a
> user-session of a web-app.
>
Where? Link?
> It appeared that it was for everybody but me evident that instead of
> heaving a db-role+passwd for every user of an application it was
> better to have just 1 set of db-credentials for the application and
> recreate a user management within the app instead using the existing
> user handling of the dbms.
I usually prefer a hybrid, where the app logs in with a particular role
with limited rights then does a SET ROLE to the app user it's currently
operating as. Related to:
--
Craig Ringer
From | Date | Subject | |
---|---|---|---|
Next Message | Chris Travers | 2011-12-14 13:35:35 | Re: Philosophical question |
Previous Message | Serge Fonville | 2011-12-14 12:52:55 | Re: Philosophical question |