Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1WdhRJ-0000tu-UB for pgsql-admin@arkaria.postgresql.org; Fri, 25 Apr 2014 14:49:22 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.80) (envelope-from ) id 1WdhRJ-00045j-DK for pgsql-admin@arkaria.postgresql.org; Fri, 25 Apr 2014 14:49:21 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1WdhRI-000447-5S for pgsql-admin@postgresql.org; Fri, 25 Apr 2014 14:49:20 +0000 Received: from tamriel.snowman.net ([2001:4830:167b::11]) by magus.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1WdhRA-00040d-Kq for pgsql-admin@postgresql.org; Fri, 25 Apr 2014 14:49:19 +0000 Received: by tamriel.snowman.net (Postfix, from userid 1000) id 9F6B65F80E; Fri, 25 Apr 2014 10:52:24 -0400 (EDT) Date: Fri, 25 Apr 2014 10:52:24 -0400 From: Stephen Frost To: Daniel Gomez Blanco Cc: Tom Lane , pgsql-admin@postgresql.org Subject: Re: Pros and cons of giving someone superuser privilege Message-ID: <20140425145224.GN2556@tamriel.snowman.net> References: <5924.1398434535@sss.pgh.pa.us> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="cbw32ubFshF9+HnX" Content-Disposition: inline In-Reply-To: X-Editor: Vim http://www.vim.org/ X-Info: http://www.snowman.net X-Operating-System: Linux/3.11.0-19-generic (x86_64) X-Uptime: 10:45:10 up 17 days, 1:01, 7 users, load average: 0.09, 0.13, 0.12 User-Agent: Mutt/1.5.21 (2010-09-15) X-Pg-Spam-Score: -2.6 (--) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-admin Precedence: bulk Sender: pgsql-admin-owner@postgresql.org --cbw32ubFshF9+HnX Content-Type: text/plain; charset=us-ascii Content-Disposition: inline * Daniel Gomez Blanco (nanodgb@gmail.com) wrote: > >From your reply and considering why I have just said, I think that, in our > case, these users would be better off without superuser access. As for > their day-to-day operations they wouldn't need it as long as they can > create their databases and roles, and execute the rest of operations on the > web interface. Just to hit on this again- that means your users can't install any extensions (not even those provided as part of PG through contrib). Eventually, users will get upset by the lack of things like PostGIS. They also can't create stored procedures using any of the untrusted languages (of course, if they could, they could get access to the host, so that may be a show-stopper anyway). Thanks, Stephen --cbw32ubFshF9+HnX Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (GNU/Linux) iQIcBAEBAgAGBQJTWnaoAAoJEO1sijiDR2RVNYYP/ik+eIlEzZeTBgeRsY0VcAN3 aYOFfxi3yalHd4joGD5uAzer7UEaEnzwV8IVzsHGTwadptZqgGFhUE9E6OMvH6gs 6uUMNJjhRZMR27Q9HdkhpHRZ0h0hpSwLZ8e8Zp5lBdnBimMdAtreN2nPvMSvmKln njmx7Z0yN8TU6iqOB20Tc37JHkTF77XwW3dac4WCzLRXvdGDiKdGcP1POh2IemNQ yFTc+8S/tNIaQlTNKE3RmN0VgOBu4uPydU8GPUfOMYGHrATmMjyEg9ulqjYzBnzE XVBDg3I2lI1Yjp+MhE0rJEvBb3sQLJd3o3WEN1I9WTdKLiqz/BduqepzfOTAhW+B Pk58UcRAu2s5DWtKjXWbObm5eYLmevaBvzn1iZSEHzfmmYPdihg07kfmjS5DDGom ZJtEGOb2rzHHiH8GNtoE3hByacOXMNPT8YWj/7d4549YUC4SF049a3W+y/MBqM20 f0fnmxKcz6qSM64JzdYPFGyGfQLuWBioCX+i4yXC7hHOL0kk/7SaO5Kiu+yyk2sh 0dt7X7To9SftyNLUFjfCS/f2UUYKCMhzCHyJSQlKTFylB/plqjNHdamfvcoLHrjR SnB1UNRolpx+AvkK4dQWQ3QkuLmWyi/8oTFODEKDr8QArrj2Dtsnmz6M5oYGHX4f csXzIzuFfv3OFbeq7LZO =CTuG -----END PGP SIGNATURE----- --cbw32ubFshF9+HnX--