B.2. Security #
The parameters below control access to Postgres Pro AXE and restrict external operations.
duckdb.postgres_role(text) #Designates a Postgres Pro role as the Postgres Pro AXE administrator.
The Postgres Pro AXE administrator has privileges on all pgpro_metastore objects and can grant some of these privileges to other roles. You can designate any Postgres Pro role as the Postgres Pro AXE administrator.
Default value:
""(empty value) — all Postgres Pro superusers are designated as Postgres Pro AXE administrators.Access: Superuser only.
This parameter requires a server restart to take effect.
For more information about configuring the Postgres Pro AXE administrator, refer to Section 12.2.
duckdb.disabled_filesystems(text) #Disables storages for pgpro_axe.
Possible values:
LocalFileSystem: Disable local storages.S3FileSystem: Disable S3 storages.HTTPFileSystem: Disable NFS storages.
You can specify multiple storages by separating their names with commas without spaces.
For example:
postgres=# ALTER SYSTEM SET duckdb.disabled_filesystems TO 'LocalFileSystem,HTTPFileSystem'; ALTER SYSTEM -- after server restart -- postgres=# SHOW duckdb.disabled_filesystems; duckdb.disabled_filesystems -------------------------------- LocalFileSystem,HTTPFileSystem (1 row)This parameter requires a server restart to take effect.
Default value:
LocalFileSystem.Access: Superuser only.
duckdb.enable_external_access(boolean) #Specifies whether pgpro_axe can perform operations outside its database, such as loading and installing modules, executing
COPY TO/FROMcommands, or reading CSV files from storages.Default value:
true.Access: Superuser only.