Re: Securing a db app - RFC - Mailing list pgsql-general

From Shridhar Daithankar
Subject Re: Securing a db app - RFC
Date
Msg-id 200406021806.14072.shridhar@frodo.hserus.net
Whole thread Raw
In response to Re: Securing a db app - RFC  (<btober@computer.org>)
List pgsql-general
On Wednesday 02 June 2004 17:58, btober@computer.org wrote:
> > You can probably use set session authorization. Here are some brief
> > steps.
> >
> > 1. Convert all your users as postgresql database users
>
> If he's going to do this, why bother with hard-coding a single user id
> and password in the application -- why not have the user log in as their
> defined Postgresql user, and let the data base handle all the security
> and permission issues?

In that case he can not use connection pooling. Thats all. Otherwise there is
no need for single user id.

 Shridhar

pgsql-general by date:

Previous
From:
Date:
Subject: Re: Securing a db app - RFC
Next
From: "Nagib Abi Fadel"
Date:
Subject: Creating a session variable in Postgres