Received: from malur.postgresql.org ([2a02:16a8:dc51::56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1foDHj-0000UJ-6G for pgsql-admin@arkaria.postgresql.org; Fri, 10 Aug 2018 19:41:19 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1foDHg-0004ta-42 for pgsql-admin@arkaria.postgresql.org; Fri, 10 Aug 2018 19:41:16 +0000 Received: from makus.postgresql.org ([2001:4800:1501:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1foDHf-0004tP-PU; Fri, 10 Aug 2018 19:41:15 +0000 Received: from momjian.us ([72.94.173.45]) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1foDHY-0000Fc-Hb; Fri, 10 Aug 2018 19:41:14 +0000 Received: from bruce by momjian.us with local (Exim 4.84_2) (envelope-from ) id 1foDHV-00039m-Mk; Fri, 10 Aug 2018 15:41:05 -0400 Date: Fri, 10 Aug 2018 15:41:05 -0400 From: Bruce Momjian To: "David G. Johnston" Cc: "bejita0409@yahoo.co.jp" , "pgsql-admin@lists.postgresql.org" , "pgsql-general@lists.postgresql.org" Subject: Re: How to revoke privileged from PostgreSQL's superuser Message-ID: <20180810194105.GD7840@momjian.us> References: <913907.28546.qm@web103014.mail.kks.yahoo.co.jp> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: Mutt/1.5.23 (2014-03-12) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk On Mon, Aug 6, 2018 at 06:19:55AM -0700, David G. Johnston wrote: > On Monday, August 6, 2018, wrote: > > > I have a request for revoking the access to user's data from DBA-user. > I think the request is right because users should be the only ones can > access their data. > > > User then needs to encrypt data prior to storing it.  Superuser can still > access the data but would be challenged to make sense of it, Keep in mind DBAs can often remove data with little detection, unless you are using some kind of block chain, which itself can force serialized data access, slowing things down. -- Bruce Momjian http://momjian.us EnterpriseDB http://enterprisedb.com + As you are, so once was I. As I am, so you will be. + + Ancient Roman grave inscription +