From: Bruce Momjian <bruce@momjian.us>
To: Daniel Gomez Blanco <nanodgb@gmail.com>
Cc: pgsql-admin@postgresql.org
Subject: Re: Pros and cons of giving someone superuser privilege
Date: Thu, 15 May 2014 15:44:53 -0400
Message-ID: <20140515194453.GA25052@momjian.us> (raw)
In-Reply-To: <CAL4HELd-Zhk3exeNdk=dxwVsAwXrgnTRfbsCThH3T0=KA33A_w@mail.gmail.com>
References: <CAL4HELd-Zhk3exeNdk=dxwVsAwXrgnTRfbsCThH3T0=KA33A_w@mail.gmail.com>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-admin>
On Fri, Apr 25, 2014 at 03:46:52PM +0200, Daniel Gomez Blanco wrote:
> Hi all,
>
> I'm part of a service where we provide users with their own PostgreSQL
> instances. The idea is that we provide them with a website to request and
> manage their databases (start/stop, backups, restores, upgrades, monitoring,
> etc). By doing this, we avoid having to give them access to the machine where
> their database is running, as this would be a security concern. But in the end,
> the user is the sole responsible for the database.
>
> At the moment we create an "admin" user for them and give it "createdb" and
> "createrole" privileges. My question is, in case we give that user the
> superuser privilege, what would the repercussion be concerning security (as in
Have you considered that your users can _create_ superusers? I think
modified Amazon Postgres blocks that, but native Postgres does not.
--
Bruce Momjian <bruce@momjian.us> http://momjian.us
EnterpriseDB http://enterprisedb.com
+ Everyone has their own god. +
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: bruce@momjian.us, nanodgb@gmail.com
Subject: Re: Pros and cons of giving someone superuser privilege
In-Reply-To: <20140515194453.GA25052@momjian.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox