Re: Who should own database?

From: Daniel Staal <DStaal(at)usa(dot)net>
To: petrov(dot)boris(dot)v(at)mail(dot)ru, pgsql-novice(at)postgresql(dot)org
Subject: Re: Who should own database?
Date: 2015-02-10 15:34:10
Message-ID: 873F82E4193047DF8BBFF56B@[192.168.1.50]
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-novice

--As of February 10, 2015 4:04:55 PM +0300, petrov(dot)boris(dot)v(at)mail(dot)ru is
alleged to have said:

> If one have database web_site_data
> And two users: php_script and boris_developer
> Who should own database?
>
> I have some point on that when using mysql, but PostgreSQL role
> management looks much more versatile, so I am looking for opinion of
> PostgreSQL users. What is your practice and why?

--As for the rest, it is mine.

Who needs to do what with the database? The owner should be the user that
needs the permissions that come with being the owner. (Or the owner should
be a specific account set up just to be the owner, and the others should
only have the permissions they need.)

>From just the names, I'd suggest if you are picking one of the two, to have
boris_developer be the owner, as php_script sounds like a web interface,
and it's usually best not to give web interfaces any permission they don't
absolutely *need*.

Daniel T. Staal

---------------------------------------------------------------
This email copyright the author. Unless otherwise noted, you
are expressly allowed to retransmit, quote, or otherwise use
the contents for non-commercial purposes. This copyright will
expire 5 years after the author's death, or in 30 years,
whichever is longer, unless such a period is in excess of
local copyright law.
---------------------------------------------------------------

In response to

Responses

Browse pgsql-novice by date

  From Date Subject
Next Message Martin Steer 2015-02-10 15:36:56 Re: How to get some table entries from backup instance back to production instance
Previous Message David G Johnston 2015-02-10 15:30:44 Re: Problem: Temporary tables not really temporary tables