Re: Securing records using linux grou permissions - Mailing list pgsql-general

From Peter J. Holzer
Subject Re: Securing records using linux grou permissions
Date
Msg-id 20191019113254.GA18996@hjp.at
Whole thread Raw
In response to Re: Securing records using linux grou permissions  (David Gauthier <davegauthierpg@gmail.com>)
List pgsql-general
On 2019-10-15 13:10:13 -0400, David Gauthier wrote:
> I was hoping there was a way to integrate the user/permissions/groups in linux
> with the PG permissions functionality. 

You can at least map the OS users to DB roles by using the peer or ident
authentication schemes. This way the users won't have to enter their
passwords again. But I think this works only if the client and the
server are on the same host. And you still have to maintain the groups,
although that should be easy to automate.

        hp

--
   _  | Peter J. Holzer    | we build much bigger, better disasters now
|_|_) |                    | because we have much more sophisticated
| |   | hjp@hjp.at         | management tools.
__/   | http://www.hjp.at/ | -- Ross Anderson <https://www.edge.org/>

Attachment

pgsql-general by date:

Previous
From: Tomas Vondra
Date:
Subject: Re: jsonb_set() strictness considered harmful to data
Next
From: Tomas Vondra
Date:
Subject: Re: Replication of Replication