Postgres Pro
Downloads
Home   >   mailing lists

Re: Guidance on user deletion - Mailing list pgsql-admin

From David G. Johnston
Subject Re: Guidance on user deletion
Date
Msg-id CAKFQuwaD09pSsUuuxt74UnS_a4hZozqC4JRAEf1Y-mAYY4n+fg@mail.gmail.com
Whole thread Raw
In response to Guidance on user deletion  ("Wetmore, Matthew (CTR)" <Matthew.Wetmore@evernorth.com>)
List pgsql-admin
Tree view
On Fri, May 10, 2024, 11:37 Wetmore, Matthew (CTR) <Matthew.Wetmore@evernorth.com> wrote:

Corporate env.

 

I’ve searched for an official BestPractice on user  deletion (leave company), but can’t find anything that is official-ish.

 

Two options:

 

  1. Change user psswd to nonsense, then expire account.
  2. DROP user.

 

There are +/- to both.

 

I prefer #1, as it gives the exact timestamp of expire (protects company and ex-employee), but corporate auditors disagree.

 

What do you do?  Any official guidance on this?

 


Use proper off-machine audit logs to make the auditors happy then drop stuff no longer has relevance.

David J.

pgsql-admin by date:

Previous
From: Wells Oliver
Date:
Subject: Re: Request for featu VACUUM FULL updates pg_stat_all_tables.last_vacuum
Next
From: Keith Fiske
Date:
Subject: Re: Adding future partition causes deadlock???