Re: Why do i need to install set_user extension if i can directly grant all required privileges to user?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Jeff, set_user needs to be installed as per CIS benchmark standards, I see this as more vulnerable giving to individual users.

When you know a user or application account need set of permission, you can directly grant all the necessary privileges, why do you need to switch account in performing any operation, I am trying to find if there is any operation in particular that can only be done by postgres, or any super user account to inherit its roles?

On Wed, Jun 21, 2023 at 10:55 AM Jeff Janes <jeff.janes@xxxxxxxxx> wrote:
On Wed, Jun 21, 2023 at 7:50 AM Bhasker Bathini <onelargepeg@xxxxxxxxx> wrote:
Hi , i was wondering, why do i need to install set_user extension when i can grant all the privileges to user directly?


Surely you don't need to install set_user in general.  Indeed, I've never even heard of it before.

Maybe you need it for some specific use, but you didn't describe anything about what you are doing.

Cheers,

Jeff


--
Bhasker Bathini

[Index of Archives]     [Postgresql Home]     [Postgresql General]     [Postgresql Performance]     [Postgresql PHP]     [Postgresql Jobs]     [PHP Users]     [PHP Databases]     [PHP Home]     [PHP on Windows]     [Kernel Newbies]     [PHP Classes]     [PHP Databases]     [Yosemite Forum]

  Powered by Linux