I've also been thinking about this possibility. Create a Linux (S.O.) user account that has the ability to run pg_dump and pg_restore and enable this user account to be able to connect to a database - I believe this is possible through PG_HBA.CONF
But I don't know how to implement this on Linux, nor how to write this entry in the pg_hba.conf file.
Em ter, 30 de jul de 2019 às 10:22, Luca Ferrari <fluca1978@gmail.com> escreveu:
On Tue, Jul 30, 2019 at 2:22 PM Ron <ronljohnsonjr@gmail.com> wrote: > Luca, it is common some large Enterprise environments to have Operations > staff that can run backups without being able to do anything else. For > example, SQL Server has a per-database user mapping named db_backupoperator.
Yes, but I think here we have to solve it with external tools, e.g., sudo. I see, however, an hard time configuring an account to execute only pg_dump without being able to "escape" into the database itself.
