Re: Inquiry: Regarding creation of indivisual user on Postgre web server - Mailing list pgadmin-support

From Murtuza Zabuawala
Subject Re: Inquiry: Regarding creation of indivisual user on Postgre web server
Date
Msg-id C999075B-C3D4-4E32-A432-3E5165B2BE5F@enterprisedb.com
Whole thread Raw
In response to RE: Inquiry: Regarding creation of indivisual user on Postgre web server  ("Chanyel BACK (EXT)" <chanyel.back@chanel.com>)
List pgadmin-support
Hi,

1. Under security concerns, we are trying to add individual users on PgAdmin so that each users can access without all accessing via same admin email. However we have realized the next morning that these individual user data were all missing the next day. Is there a specific setting to prevent this from happening?


pgAdmin4 stores its configuration (including users) in a SQLite database file called pgadmin4.dbHeroku has an ephemeral filesystem, and any files written to disk disappear when it restarts. According to the documentation, it does so every 24 hours.


Heroku dynos automatically restart (or "cycle") at least once every 24 hours to maintain platform health and security. This process, which may include up to 216 minutes of random variation, cannot be disabled, requiring applications to be designed for graceful shutdowns and stateless operation.
Key Aspects of Daily Dyno Restarts:
  • Purpose: Ensures app health and shifts applications to new physical hardware if necessary.
  • Timing: Roughly every 24 hours, plus a random delay to prevent all dynos in an app from restarting simultaneously.
  • Manual Restarts: Running heroku restart manually resets the 24-hour timer.
  • Impact: Any changes made to the local ephemeral filesystem are deleted upon restart.
  • Exceptions: While rare, some specialized private spaces may have different configurations, but standard cycling is a core platform feature.
Solution
You need to store the pgAdmin data directory typical location /var/lib/pgadmin outside the ephemeral filesystem.


2. Due to the same security issue, we would like to track logs for which user actions. With the condition that individual user accounts are created permanently, are there a way to check user actions in PgAdmin? We would also like to know what can be tracked(login info, sql execution on tables, etc) and if so, how to track them. 

This must be done in PostgreSQLnot pgAdmin (it is just a client)


Thank you!

Murtuza Zabuawala



On 12 Mar 2026, at 2:26 PM, Chanyel BACK (EXT) <chanyel.back@chanel.com> wrote:

To add on regarding the first question, we are running pgAdmin on Heroku.
Theefore We tried adding the following Config Vars on Heroku side to maintain user accounts. However, all created user accounts on PgAdmin side were deleted again.

Could you help us identify the problem? We have conducted as instructed by the Heroku side, but did not work. We were instructed to consult with the PgAdmin side.

<image001.png>

<image002.png>

Your immediate response would be greatly appreciated.

Chanyel Back
 
From: Chanyel BACK (EXT)
Sent: Wednesday, March 11, 2026 10:55 AM
To: pgadmin-support@lists.postgresql.org
Cc: Jianbin YAO (EXT) <jianbin.yao@chanel.com>
Subject: Inquiry: Regarding creation of indivisual user on Postgre web server
 
Hello Postgre Support Team,
 
Thank you always for your support.
Regarding the inquire mentioned on the tile we would like to ask two main questions.
For your information, we are currently using the browser version of PgAdmin, connected to the app in Heroku.

1. Under security concerns, we are trying to add individual users on PgAdmin so that each users can access without all accessing via same admin email. However we have realized the next morning that these individual user data were all missing the next day. Is there a specific setting to prevent this from happening?

2. Due to the same security issue, we would like to track logs for which user actions. With the condition that individual user accounts are created permanently, are there a way to check user actions in PgAdmin? We would also like to know what can be tracked(login info, sql execution on tables, etc) and if so, how to track them. 

Thank you for your support in advance.

Chanyel Back

pgadmin-support by date:

Previous
From: "Chanyel BACK (EXT)"
Date:
Subject: RE: Inquiry: Regarding creation of indivisual user on Postgre web server
Next
From: Narvin Tom Castro
Date:
Subject: I accidentally cascaded my inventory, now I lost it all.