Re: How do I create a Backup Operator account ?

From: Neil <neil(at)fairwindsoft(dot)com>
To: Marcos Aurelio Nobre <marconobre(at)gmail(dot)com>
Cc: pgsql-general(at)lists(dot)postgresql(dot)org
Subject: Re: How do I create a Backup Operator account ?
Date: 2019-07-30 02:37:22
Message-ID: 57DD1ECF-6822-4A00-81D1-A4E9E81AC460@fairwindsoft.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general


> On Jul 29, 2019, at 7:49 PM, Marcos Aurelio Nobre <marconobre(at)gmail(dot)com> wrote:
>
> Hi all.
>
> I need to create a PostgreSQL account , that only do a Backup and Restore operations over a PGSQL Database .
>
> My main difficulty is to only assign Backup and Restore capability to one user account, unlike the ability to perform DQL and DML operations for ordinary user accounts.

I’m not sure I understand what you are really trying to do. If this Backup/Restore users is going to backup and restore the complete database then they will have to have essentially superuser permissions. Otherwise they will not have access to all of the data. They will have to have permission for DDL and DML as the restore has the potential for dropping and creating a bunch of objects, and at least DELETE, TRUNCATE, COPY and/or INSERT data.

What are you trying to protect against?

>
> In POSTGRESQL there is no backup / restore privilege because these operations are performed by server specific utilities.
>
> One possibility that I thought would be:
>
> I was wondering if it was possible to configure the pgAdmin4 menus to be available for a particular login, only Backup & Restore items. But I'm not sure how to associate a bank login account with a specific menu setting of a client tool.
>
> Could someone give me any ideas or directions?

Neil
https://www.fairwindsoft.com

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Luca Ferrari 2019-07-30 05:58:02 Re: How do I create a Backup Operator account ?
Previous Message Marcos Aurelio Nobre 2019-07-30 00:49:56 How do I create a Backup Operator account ?