On Sunday, May 12, 2024, Ron Johnson <ronljohnsonjr@xxxxxxxxx> wrote:
On Sun, May 12, 2024 at 6:56 AM vrms <vrms@xxxxxxxxxxxxx> wrote:
how do you practically expire an account in postgres?The five account systems I've had experience with (OpenVMS, Linux, Active Directory, SQL Server, Postgresql) all have the ability to expire users, and to unexpire them if the person ever returns.
ALTER ROLE ... VALID UNTIL 'timestamp';
I suppose, but that only expires the password, not invalidates the role. There isn’t a concept of “invalid role”. If you want to prevent a role from being used to login remove the login attribute.
David J.
