Re: Permissions

On Tue, Sep 20, 2016 at 1:36 PM, Andre Labuschagne <technical(at)eduadmin(dot)com>
wrote:

>
> Sorry about the top posting. Still learning here.
>
> Hi David
>
> I am not making myself clear. Let us try another angle. We are concerned
> about security breaches and database theft within and outside the
> organisation. Assuming a rogue employee gets their hands on a full backup
> of one of the databases and they did not have the details of the only role
> that is listed as having privileges would this employee be able to download
> PG set it up on his or computer, provide a superuser password and then have
> full access to the database? Is there a way to prevent this access?
>
>
​No. Not knowing the name of the only super user might be inconvenient but
its only security by obscurity. If they have unencrypted physical data
files​

​they have the potential see all of the data contained therein. They don't
even need passwords since they can just setup pg_hba.conf for trust access.
​

David J.