Re: Philosophical question

From: Craig Ringer <ringerc(at)ringerc(dot)id(dot)au>
To: Andreas <maps(dot)on(at)gmx(dot)net>
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: Philosophical question
Date: 2011-12-14 13:28:58
Message-ID: 4EE8A49A.1070406@ringerc.id.au
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On 14/12/2011 8:32 PM, Andreas wrote:
> Hi,
>
> I asked elsewhere about the best way to store db credentials within a
> user-session of a web-app.
>
Where? Link?

> It appeared that it was for everybody but me evident that instead of
> heaving a db-role+passwd for every user of an application it was
> better to have just 1 set of db-credentials for the application and
> recreate a user management within the app instead using the existing
> user handling of the dbms.
I usually prefer a hybrid, where the app logs in with a particular role
with limited rights then does a SET ROLE to the app user it's currently
operating as. Related to:

http://stackoverflow.com/questions/8432636/in-postgresql-are-partitions-or-multiple-databases-more-efficient/8439618#8439618

--
Craig Ringer

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Chris Travers 2011-12-14 13:35:35 Re: Philosophical question
Previous Message Serge Fonville 2011-12-14 12:52:55 Re: Philosophical question