Postgres Pro
Downloads
Home   >   mailing lists

Re: Python access to macOS keychain - Mailing list pgadmin-support

From Nikhil Mohite
Subject Re: Python access to macOS keychain
Date
Msg-id CAOBg0APCTmD0miLM1wxfYLSAs6-Zini-fvujiu=g1uAnkQOVJw@mail.gmail.com
Whole thread Raw
In response to Python access to macOS keychain  (Neil <neil@fairwindsoft.com>)
Responses Re: Python access to macOS keychain  (FWS Neil <neil@fairwindsoft.com>)
List pgadmin-support
Tree view
Hi Neil,

pgAdmin uses a Keychain to store the pgAdmin server passwords if users opt for save password functionality. Keychain access is Python process-specific. Hence allowing keychain access to the python process requested by pgAdmin will be specific to this python pid. We are trying to add a pgAdmin name in the waring where it asks to allow keychain access.


On Sun, Dec 24, 2023 at 10:12 PM Neil <neil@fairwindsoft.com> wrote:
When I start pgAdmin on macOS, I get a request to allow ‘Python' access to my keychain.

Allowing ‘Python' unfettered access to my keychain is not acceptable.  I would however, allow pgAdmin to access my keychain.

I understand that pgAdmin is using python.

Can someone explain or point to an explanation about the security implications of allowing ‘Python' to access my keychain?

Is this really an unlimited authority for any Python process to access my keychain as the dialog implies?

Thanks,
Neil



Thanks,
Nikhil 

pgadmin-support by date:

Previous
From: Yogesh Mahajan
Date:
Subject: Re: Enable HTTPS on pgAdmin in Server Mode
Next
From: Yogesh Mahajan
Date:
Subject: Re: Error while opening pgadmin