Users and object privileges maintenance

From: Lok P <loknath(dot)73(at)gmail(dot)com>
To: pgsql-general <pgsql-general(at)lists(dot)postgresql(dot)org>
Subject: Users and object privileges maintenance
Date: 2024-02-17 21:50:20
Message-ID: CAKna9VbjA+2t-st_cxBMhXbAes6HXOR7z=x3Y9QFdkB9VdE8ww@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Hello All,
We were having past experience in Oracle and are newly getting moved to
postgres database. In there we have schema which alternately also called as
Users and the super user was sys/system through which the dev team never
login but only DBA does. And DBA used to create some functional users to
which write access is provided to the table/view when they are created
through Grant command. These functional users are used by applications to
do the DML etc. Other users are given read only privileges only so as to
not do DML but just view the data.

Again these privileges are not given directly to the objects but given
through roles for better maintenance and control purposes. We had some
users also which were not supposed to see some sensitive attribute, so we
created views(by excluding the sensitive column) on top of those and only
gave the read-only access to the views but not to the underlying tables.

So I just wanted to understand if these grants and privileges for
objects/users are given and maintained in a similar way in postgres
database Or any different strategy is needed. And if it's different in RDS
Postgres as compared to opensource one? If any document to follow for the
same.

Regards
Lok

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Kerr Livingstone 2024-02-17 22:58:02 Re: Version 6 binaries for RHEL 7
Previous Message Peter J. Holzer 2024-02-17 20:52:33 Re: How to do faster DML