Re: Permissions

From: Albe Laurenz <laurenz(dot)albe(at)wien(dot)gv(dot)at>
To: "'Andre Labuschagne *EXTERN*'" <technical(at)eduadmin(dot)com>, Alan Hodgson <ahodgson(at)lists(dot)simkin(dot)ca>
Cc: "pgsql-novice(at)postgresql(dot)org" <pgsql-novice(at)postgresql(dot)org>
Subject: Re: Permissions
Date: 2016-10-05 08:04:49
Message-ID: A737B7A37273E048B164557ADEF4A58B538BE123@ntex2010i.host.magwien.gv.at
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-novice

Andre Labuschagne wrote:
> You better believe it.
>
> The best databases on the planet do allow that - Mimer, Sybase and now I am finding Interbase as well.
> These vendors say the feature I request is security 101. There are no doubt others that I have not
> seen nor tested yet. But not allowing that feature means there is de facto zero security. As it
> stands now PG has zero security.

Harsh words.

Since there was little context in the e-mail, I read the thread, and from what I read
I understood that what you want is to backup a database at site A, ship it to site B
and restore it there while making sure that nobody can tamper with the backup or steal it
while it is being shipped.

Is that correct?

If yes, why not encrypt the backup before shipment?
Any encryption tool like GnuPG (https://gnupg.org/) should be up to the task.

It may well be that many databases have features that allow you to encrypt a backup
with on-board tools, but PostgreSQL doesn't have the manpower to write and maintain paraphernalia
like that with with the core distribution.

Yours,
Laurenz Albe

In response to

Responses

Browse pgsql-novice by date

  From Date Subject
Next Message Andre Labuschagne 2016-10-05 09:33:54 Re: Permissions
Previous Message Arunprakash Selvaraj 2016-10-05 07:43:29 Require steps for deploying Pl/Java