On Sunday, May 12, 2024, Ron Johnson <
ronljohnsonjr@gmail.com> wrote:
The five account systems I've had experience with (OpenVMS, Linux, Active Directory, SQL Server, Postgresql) all have the ability to expire users, and to unexpire them if the person ever returns.
how do you practically expire an account in postgres?
ALTER ROLE ... VALID UNTIL 'timestamp';
I suppose, but that only expires the password, not invalidates the role. There isn’t a concept of “invalid role”. If you want to prevent a role from being used to login remove the login attribute.
David J.
