Re: Why do i need to install set_user extension if i can directly grant all required privileges to user?

Jeff, set_user needs to be installed as per CIS benchmark standards, I see
this as more vulnerable giving to individual users.

When you know a user or application account need set of permission, you can
directly grant all the necessary privileges, why do you need to switch
account in performing any operation, I am trying to find if there is any
operation in particular that can only be done by postgres, or any super
user account to inherit its roles?

On Wed, Jun 21, 2023 at 10:55 AM Jeff Janes <jeff(dot)janes(at)gmail(dot)com> wrote:

> On Wed, Jun 21, 2023 at 7:50 AM Bhasker Bathini <onelargepeg(at)gmail(dot)com>
> wrote:
>
>> Hi , i was wondering, why do i need to install set_user extension when i
>> can grant all the privileges to user directly?
>>
>>
> Surely you don't need to install set_user in general. Indeed, I've never
> even heard of it before.
>
> Maybe you need it for some specific use, but you didn't describe anything
> about what you are doing.
>
> Cheers,
>
> Jeff
>
>>

--
Bhasker Bathini